Only removes Web API's QueryFilterProvider, not every IFilterProvider
Previous code cleared all IFilterProviders which was too broad and removed the filter that handled the [Authorize] attribute thus breaking attributed security!
Ensure init of settings only happens once per AppDomain; for unknown reasons WebApi called initialize method several times ... but not every time the controller was created.
Merge branch 'master' of https://github.com/IdeaBlade/Breeze