Owin Self-Hosted Web Api with bearer tokens.