public void Roles_may_be_empty_if_user_should_just_have_been_authenticated()
        {

            var sut = new AuthorizeAttribute();

            sut.Roles.Should().BeEmpty();
        }
        public void roles_are_assigned_properly()
        {
            
            var sut = new AuthorizeAttribute("User", "Admin");

            sut.Roles.First().Should().Be("User");
            sut.Roles.Last().Should().Be("Admin");
        }