Fix handling of empty X-OAuth-Scopes.