Changed additionalAuthorizationAttributes to az_attr

Changed the key to send additional authorization information through the token request
Makes it simpler and matches the actual claim in the token