fixed grant types available scopes

Grant types: authorization code, implicit and resource owner password credentials are working with user scopes and not client scopes. Because using this grant types you can access resource as an user, so you have to have his access privileges (scope) and not client's.