Added test for `authorize` without `scopes`