Bugfix for checking whether the scope is actually a list of comma-separated scopes

The check is supposed to look for spaces or commas *within the value* of a singleton set, but the code performs the `contains` check for "," on the initial set of scopes (which kind of misses its target).