Update 'any scopes' documentation

Changed the wording to reflect the intended behaviour of granting permission to access a route.

README.md

@@ -31,7 +31,7 @@ app.post('/users',
   jwtAuthz([ 'read:users', 'write:users' ], {}),
   function(req, res) { ... });
 
-// This user will be denied access
+// This user will be granted access
 var authorizedUser = {
   scope: 'read:users'
 };