Added authorization to web api.