Modified WebApiConfig to alllow users logged in through the web application to access the API using cookie authentication