Passing collection scopes in the production browser breaks login

[hstove]

Friedger reported that you can't login to apps that request a collections scope if you're using the current production version of the Browser.

I haven't repro'd or tried to debug this, but it should be an easy fix.