[Issue #15] Allow token usage when no scope set to an endpoint