re-apply  global authorize filter

antiForgery token and autherization is required for all the web api
requests