Separated scope verification in new oauth2_backend functions (Issue #12)

Includes the changes in "verify_redirection_uri..." Pull Request.
**WARNING: Breaks compatibility with existing backend implementations.**