Sample code for Web Api Security