Make client.audience_for a one-to-one relationship

This will allow us to validate a redirect_uri given a scope
unambiguously which is needed for the implicit grant flow.
Will sqlalchemy detect that the backref should be a single item, or will Scope.audience be a list?  Anyway, we could remove the backref until we thin kwe need it.