Made a start with breeze using the https://github.com/johnpapa/PluralsightSpaJumpStartFinal
added antiforgerytoken to index.html and added token to header for all breeze ajax calls.
Also added an attribute that can read the header from the ajax call and verifies if the client is our client