If no scopes are granted in a token, the uaa will return an error.