Return 422 instead of 400 for incorrectly scopes token grants