Added authentication middleware and Web API controller