Critical bug fix and improvement.

The first change is to fix the static extension tracker methods (and necessary changes to the core interface) to make it thread-safe when running as an MVC filter attribute. This is a critical bug fix. I tried to keep backwards compatibility as much as possible.

The second change adds support for WebAPI. I've put it in a separate assembly to avoid any unnecessary conflicts or extra dependency requirements.