Role provider service support for security attributes

- Role provider service will now check authorized controller and it's
action for "AllowUnauthorized" or "AllowAnonymous" attributes, before
authorizing it with the database.