MDL-58535 oauth2: Don't rely on the return scopes
MDL-58535 oauth2: Don't rely on the return scopes

MS makes a big mess of returning scopes from oauth requests. They only return the custom MS scopes like
User.Read and they never return non-MS scopes (like openid, profile, email).

dilawar/moodle