Refactored authentication to use / provide OAuth at WebAPI