Ignore scope change on setting envvar

See https://github.com/idan/oauthlib/pull/265 for explanation/discussion
Better indent the entire scope check or else I might sleepily forget about it and add unrelated code to the end of the file :)