Always parse the scope parameter for commas
There is no security filter for /oauth/authorize so we haven't added that filter
This filter was applied when login server was separate as it was hitting a different endpoint
Merge branch 'feature/always_parse_scope_parameter_for_backwards_compatibility' into develop
Removes dead code.

appUrl declared in a bunch of places but not used.

Signed-off-by: Swapnil Bawaskar <sbawaskar@pivotal.io>