web api token based authentication example c