Anti-CSRF http://www.asp.net/web-api/overview/security/preventing-cross-site-request-forgery-(csrf)-attacks