Adds missing check for valid attributes

It seems that I forgot to add a check to make sure the decrypted
token has all of the specified required attributes. This commit
fixes that oversight.