Extending the default Web API Default Authentication.