handled an edgecase in Covered::Services.self.validate_access_token
moved form Virtus#attributes to Virtus#attribute_set