if the client doesn't ask for any system scopes, but asks for some non-system scopes, they'll now get the defaults instead of none

addresses #498
[maven-release-plugin] prepare release mitreid-connect-1.0.11
[maven-release-plugin] prepare for next development iteration