fix: only allow scopes to be returned iff it matches resourceType

[rsmayda]

Issue #, if available: #83

Description of changes: Checks to ensure that there is at least 1 valid scope against the resourceType for search-type requests. If there isn't the jwt validation will fail

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[ssvegaraju]

I think this looks good! Just to confirm I understood correctly:
If a search performed with (rev)/include (e.g. we request a DocumentReference and do an _include to get the Patient resource, then as long as we have the scope for the DocumentReference, the patient scopes won't be filtered out, correct?

[rsmayda]

I think this looks good! Just to confirm I understood correctly: If a search performed with (rev)/include (e.g. we request a DocumentReference and do an _include to get the Patient resource, then as long as we have the scope for the DocumentReference, the patient scopes won't be filtered out, correct?

That's right!