[Issue #13] PUT /oauth20/scope for scope update instead of POST /oauth20/scope; add end-to-end tests