goauth2 - add scope to AuthCodeURL only when it's present