Add missing 'after attribute name' state

Previously, attempts to tokenize `<div disabled id="foo">` would fail.

/cc @wycats @kselden @ebryn, not sure who actually looks here ^_^