updated to allow utilization of Authorize and AllowAnonymous attributes