https://elanderson.net/2015/09/web-api-with-get-filter-and-security/