controller - bug fix w/ assemblies and 3rd party checkout

The code that validated items are acceptable for third party checkout
was breaking on assemblies because %attribs isn't set on those items in
the cart.