handles empty scope string in token response