feat: allow the specification of a different base class for an API controller in ASP.NET

Must support

```csharp
[AllowAnonymous]
public class VacationPolicyController : MyControllerBase
{
    public ActionResult Policy()
    {
        return View();
    }
}
```

If no custom base class is specified the ASP.NET default class `ControllerBase` is used.