Messages 2.4 - Clarify that additional scope values may be used

[Michael Jones]

While we say that OAuth allows additional scope values to be defined and used, we don't say that OpenID Connect allows additional scope values to be defined and used. We need to do this.

[Michael Jones]

Per today's call, we will make this clarification, also saying that scope values that are not understood should be ignored.

[Michael Jones]

Fixed #829 - Stated that additional scope values can be defined and used and that scope values that are not understood should be ignored.

→ <<cset 6873d87f6aa8>>