SECOAUTH-400: add integration test for scope in implicit grant