RunInWebApiPolicy() helper