Fix az-security-requirement for scope with empty value

[mikekistler]

Little fix to az-security-requirement to handle the case where an oauth2 scope is defined but the description is an empty string.