OAuth tweaks and tests rework
OAuthScopesPlug: disallowed nil token (unless with :fallback option).
Introduced proper OAuth scopes usage to controller tests (99% of controller tests in develop
don't specify OAuth token, and this results in a difference between prod and test environments which could be error-prone long-term).