Web Api Security Methods