anchor.diff:      end
     end
   
  +  #validate that we have all required parameters
  +  message = ''
  +  if is_missing params, 'jwt', 'token', 'signing-key'
  +     if is_missing params, 'jwt', 'token', 'policy', 'activeKeyId'
  +       message = message + '\nuaa.jwt.policy.active_key_id'
  +     else
  +       activeKeyId = params['jwt']['token']['policy']['activeKeyId']
  +       if is_missing params, 'jwt', 'token', 'policy', 'keys', activeKeyId
  +         message = message + '\nuaa.jwt.policy.active_key_id mismatch'
  +       elsif is_missing params, 'jwt', 'token', 'policy', 'keys', activeKeyId, 'signingKey'
  +           message = message + '\nuaa.jwt.policy.active_key_id missing signingKey'
  +       end
  +     end
  +  end
  +
  +  # message = message + (is_missing(params, 'login', 'serviceProviderKeyPassword')?'\nlogin.saml.serviceProviderKeyPassword' : '')
  +  # message = message + (is_missing(params, 'login', 'serviceProviderCertificate')?'\nlogin.saml.serviceProviderCertificate' : '')
  +  if !(message == '')
  +    raise ArgumentError, 'Missing properties:' + message
  +  end
  +
   %>
   <%=YAML.dump(params, :indentation => 2)%>
  
positive.code:     end
  
      add_value(jwt, p('uaa.jwt.refresh.restrict_grant'), 'token', 'refresh', 'restrict_grant')
      params['jwt'] = jwt
    end
  
  
negative.code:       }
      }
    }
    if uaa_db_scheme == 'sqlserver' then
      params['database']['url'] = "jdbc:#{p('uaadb.db_scheme')}://#{p('uaadb.address')}:#{p('uaadb.port')};databaseName=#{uaa_db['name']}"
    end
  
    # should the DB not use lower() function in SCIM queries (if true)
    if_p('uaa.database.case_insensitive') do |case_insensitive|
  