Added Web API plumbing for resource authorization