Fix regression: OAuth2 authorize endpoint rejects empty scope parameter

Fixes #115

Regression was introduced by 45d4598e (Replace flask_oauthlib with plain oauthlib).