Prevent Cross Site Scripting Web Api C