External scopes are not added for client_credentials grants

Externally authorized scopes now don't appear in the approval flow
Minor updates
Fix the owner password flow to work with users authenticated by the login server