Update WebApi to use IdentityService and Token