Fix validate_token_scopes