add claims authorize attribute back into web api project