Remove tokens without user attribute matches from URL as an option

[bjagg]

If a URL has a user attribute that is not populated, the corresponding token will remain in the URL, potentially causing an error.