TokenController now passes clientId into scopeExists().

Fixes #124 :)