Moved Authorize declaration from web.config to controller attributes
New versions of Thinktecture IdentityModel
Changed header creation in client.