The list of scopes now RFC6749 Sec.3.3 compliant

See http://tools.ietf.org/html/rfc6749#section-3.3 for details. (Space separated list of scopes/was comma seperated)

The callback url is now determined correctly if the swagger index.html file and
therefore the o2c.html is not in root directory of the host.

Also the popup opened more than one authorization-request-tab in firefox
(seemd to append the on-click js method instead of replacing it)