Don't allow creating personal access tokens with no scopes
Current Behavior
Users are allowed to create personal access tokens without any scopes (scope-less tokens are unable to authorize any action on GitLab)
Expected Behavior
Users shouldn't be allowed to create personal access tokens without any scopes, possibly by showing a validation error.