Fix handling of missing X-OAuth-Scopes.