Handling [Autorize] attribute without oAuth/jwt tokens. - C#