Authorize: fixed encoding of multiple scopes