[PF-486] Detect invalid scope in client_credentials request

Only the 'password' grant_type checked that the requested scopes
where present in the client. This commit ensures that the same
check is made for the 'client_credentials' grant type.