updated token endpoint documentation to reflect current behavior

fixes #284
The token contains a string with the scopes separated by spaces with key 'scope' instead of a list of string with key 'scopes'
I think is the only place where the documentation is wrong, let me know if further changes are needed.