App submission got rejected due "Use OAuth to ask for scope permissions immediately after merchants"

How do you check the data if the user not login in your application yet? In case for our app, we need the user to login first so we can get data and do the checking.