We are no longer allowing `jwt` to have a `scope`.  I've sent an email to IETF about this, since Google allows this, but Salesforce does not.  Since it is not present in the spec, for now we will remove it an only accept scope via GET or POST