Fixed `scopes` of apps / authorizations / tokens from apps initially created with space-delimited `scope`.