No scopes are returned after POST /oauth2/token

[thesbros]

Looks to be fixed by my testing. Thanks for the prompt response!