Unwanted behavior in add route on ZOAuthRoute

[arnaud-moncel]

Describe the bug
When you create route & you add some method like this:

route = zoapp.createRoute("/bots");
// Bot create
route.add("POST", "", ["owner, master"], bots.createBot);
// get bots
route.add("GET", "", ["owner", "admin", "master"], bots.getBots);

The restriction for this POST route is ["owner", "admin", "master"].

Expected behavior
I think we should be able to chose perfectly the restriction.
In this example the restriction should be ["owner", "master"] for the POST route.

See

zoauth/src/zoauthRouter.js

Line 64 in be35783

add(method, path, scopes, callback, authCallback = null) {

to fix it.