Avoid annotate and Q filter bug

https://code.djangoproject.com/ticket/18378

This update changes how require_scopes_exact handles filtering: it explicitly selects pk and scopes__id so that the scope_id column ends up in the select statement, which avoids an SQL bug where it doesn't recognize the column in the having clause when used in a Q filter.