Allow scopes to contain non-whitespace (per spec)

It turns out that the Facebook "feature" was only used server side anyway
so there's no reason we need to support it, and removing it is pretty painless.

Fixes gh-138