Fix default scope in example app

The oauth_application_default_scope should be a string, not an array.

Also improve error reporting on the callback in the client app.