Always check scope even if not specified
Always check scope even if not specified

This ensures we lock down all routes to someone who only has access to
a specific scope

spark/node-oauth2-server,zoltangbereczky/node-oauth2-server