[PF-487] Internal server errors when scopes are involved

This commit ensures that the scope field isn't queried when finding
access tokens using a DM query. The scope is instead filtered using
a select on the result.