Fixed problem with returning a Created response that caused an InternalServerError because of invalid uri.
Added global authorize attribute filter in the WebApiConfig.cs.