secure ASP.NET Web API using basic authentication