Ensure we hand out max user.scope

The token.scope was valid at token creation time. The user's scope
could since have changed (maybe we got kicked out of a group).

src/routes/user.js

@@ -0,0 +1,20 @@
+'use strict';
+
+exports = module.exports = {
+    getCloudronConfig: getCloudronConfig
+};
+
+var cloudron = require('../cloudron.js'),
+    HttpError = require('connect-lastmile').HttpError,
+    HttpSuccess = require('connect-lastmile').HttpSuccess,
+    _ = require('underscore');
+
+function getCloudronConfig(req, res, next) {
+    cloudron.getConfig(function (error, cloudronConfig) {
+        if (error) return next(new HttpError(500, error));
+
+        var result = _.pick(cloudronConfig, 'apiServerOrigin', 'webServerOrigin', 'fqdn', 'adminFqdn', 'version', 'progress', 'isDemo', 'cloudronName', 'provider');
+
+        next(new HttpSuccess(200, result));
+    });
+}