Don't include AttributeStatement if nil or empty

SAML provider was unable to parse the response if attributes were empty. This removes the AttributeStatement if no attributes are specified