Fixed a bug where if the user denies all scopes, an incorrect token would be generated