Ignore the client_credentials scopes in the 3 steps oauth process

Actually they should be able to get more then one client grant scope.