Bugfix for handling non-standard comma-separated scopes

The check is supposed to look for spaces or commas *within the value* of a singleton set, but the code currently performs the `contains` check for "," on the initial set of scopes (which kind of misses its target).