SOAP XML web svc, Auth Svr with claims