fix scopes normalization in validate_scopes method

It seems to be an error in validate_scopes inside GrantTypeBase when user passes in request.scopes variable:
the first part of the request.scopes assignment, the one before the *or*, will never be assigned. 
This fix let my tests pass, does it sound reasonable?