Token based authentication (JWT) in Web API and MVC