webapi + owin + registration + token generation + autofac integration + doodle-autofac + system.web.http.authorization attribute for concepts controller