RegisterExternal question

[lukasz-karolewski]

Hi Taiseer,
i was going through you great article about refresh tokens i have one question.

In // POST api/Account/RegisterExternal you use [AllowAnonymous] instead of [OverrideAuthentication] and [HostAuthentication(DefaultAuthenticationTypes.ExternalBearer)]

    [Route("RegisterExternal")]
    public async Task<IHttpActionResult> RegisterExternal(RegisterExternalBindingModel model)

is it just a simplification for demo purpose (auth interceptor you have to be extended to make use of external token) or you don't think this is required here?