Moved Microsoft.IdentityModel from nuget to classic assembly reference.
Copied WebApi auth config from MVC4 project.
MVC5: Base64 in client and correct header config on server.