omit empty scope in access token response

[WindzCUHK]

Description

• omit empty scope in access token response
• update go.mod
• add panic handler

Type of change

• [x] Bug fix
• [ ] New feature
• [ ] Refactoring (no functional changes, no api changes)
• [ ] Non-code changes (update documentation, pipeline, etc.)

Flags

• [ ] Breaks backward compatibility
• [ ] Requires a documentation update
• [ ] Has untestable code

Related issue/PR

• 30

• 31

---

Checklist

• [x] Followed the guidelines in the CONTRIBUTING document
• [x] Added prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip] in the PR title if necessary
• [x] Tested and linted the code
• [x] Commented the code
• [x] Made corresponding changes to the documentation
• [x] Passed all pipeline checking

Checklist for maintainer

• Use Squash and merge
• Double-confirm the merge message has prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip]
• Delete the branch after merge