http://www.cnblogs.com/Irving/p/4607104.html

http://www.cnblogs.com/xishuai/p/aspnet-webapi-owin-oauth2.html