//设计中，未完成
references:
http://www.asp.net/web-api/overview/security/basic-authentication
http://technet.microsoft.com/zh-cn/library/dd378867(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/gg637807(v=ws.10).aspx
http://www.networkworld.com/article/2208967/mobile-security/two-factor-authentication-through-windows-server-2008-nps.html
http://www.codeproject.com/Articles/14350/Basic-authentication-in-ASP-NET-against-custom-dat