Web API 2 authentication with JWT
Instead of keeping KEY in config, I would keep it with user records. A unique key for each user.

I admit, I don't get why creating keys dynamically would break the load balancing scenario.  We can have a key created at the back-end where we have a single service serving all the load balances servers (such as a database).