I had exactly the same problem while using both name email scopes, but no issues using only one email or name scope.
Suggestion above to send request with &scope=name%20email instead of &scope=name+email solved my issue. Thanks a lot!
Worth noting is that I noticed this problem only on Safari, on Chrome it worked just fine with the + sign.