SECOAUTH-394: Append scope to implicit response if different than requested