Login: fixed empty token scopes