Implicit grant now handles scope like password grant