private static bool SkipAuthorization(HttpActionContext actionContext)
{
    Contract.Assert(actionContext != null);

    return actionContext.ActionDescriptor.GetCustomAttributes().Any()
               || actionContext.ControllerContext.ControllerDescriptor.GetCustomAttributes().Any();
}