master: adds web API project for NET40 - at this point, authorization works but resource server needs to be implemented