Play Securing ASP.NET Web APIs