anchor.diff:      end
     end
   
  +  #validate that we have all required parameters
  +  message = ''
  +  if is_missing params, 'jwt', 'token', 'signing-key'
  +     if is_missing params, 'jwt', 'token', 'policy', 'activeKeyId'
  +       message = message + '\nuaa.jwt.policy.active_key_id'
  +     else
  +       activeKeyId = params['jwt']['token']['policy']['activeKeyId']
  +       if is_missing params, 'jwt', 'token', 'policy', 'keys', activeKeyId
  +         message = message + '\nuaa.jwt.policy.active_key_id mismatch'
  +       elsif is_missing params, 'jwt', 'token', 'policy', 'keys', activeKeyId, 'signingKey'
  +           message = message + '\nuaa.jwt.policy.active_key_id missing signingKey'
  +       end
  +     end
  +  end
  +
  +  # message = message + (is_missing(params, 'login', 'serviceProviderKeyPassword')?'\nlogin.saml.serviceProviderKeyPassword' : '')
  +  # message = message + (is_missing(params, 'login', 'serviceProviderCertificate')?'\nlogin.saml.serviceProviderCertificate' : '')
  +  if !(message == '')
  +    raise ArgumentError, 'Missing properties:' + message
  +  end
  +
   %>
   <%=YAML.dump(params, :indentation => 2)%>
  
positive.code:     hash[last_key] = value
    end
  
    uaa_db = p_arr('uaadb.databases').find { |db| db['tag'] == 'uaa' }
    uaa_role = p_arr('uaadb.roles').find { |role| role['tag'] == 'admin' }
    protocol = p('login.protocol')
    issuer_uri = p('uaa.issuer', p('uaa.url'))
    oauth_clientsLoginRedirectUri = p('uaa.url')
  
  
negative.code:     end
  
      add_value(jwt, p('uaa.jwt.refresh.restrict_grant'), 'token', 'refresh', 'restrict_grant')
      add_value(jwt, p('uaa.jwt.refresh.unique'), 'token', 'refresh', 'unique')
  
      refresh_token_format = p('uaa.jwt.refresh.format')
      valid_formats = ['opaque', 'jwt']
      if valid_formats.include?(refresh_token_format)
        add_value(jwt, refresh_token_format, 'token', 'refresh', 'format')
      else
        raise ArgumentError.new "uaa.jwt.refresh.format #{refresh_token_format} must be one of #{valid_formats}"
      end
  
      params['jwt'] = jwt
    end
  
  