Deny auth if requested attribute is missing

[theseal]

If a requested attribute is missing the authorization should fail

All Submissions:

• [x] Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• [x] Have you added an explanation of what problem you are trying to solve with this PR?
• [x] Have you added information on what your changes do and why you chose this as your solution?
• [x] Have you written new tests for your changes?
• [x] Does your submission pass tests?
• [ ] This project follows PEP8 style guide. Have you run your code against the 'flake8' linter?