Changed auth in the web api auth filter