Bump travis-core
Fix scopes and access token specs
Return Oauth headers even if none scope was matched

If an endpoint specifies more than one scope and none of the scopes from
access token matches, return oauth headers for the first of the scopes