Contains first cut of Authorization support in webapi