* Removing exception filters to workaround Roslyn changes

* Adding System.IO in project.json to allow
  Microsoft.AspNet.Security.DataProtection to compile.
these might be better as:
```
catch (CrytpographicException) { throw; } catch (Exception ex) { ... }
```