Make ApiController.Result() methods protected.

For consistency with MVC (and less clutter when unit testing specific
controllers), make ApiController.Result() methods protected rather than
public.