- [Security] Fix JWT scopes in XBlock callbacks. (by @regisb)