How to authenticate against your Azure-secured Web API from SPA / Native App