title: WebAPI token on Header - how to set 30 minutes expiration
body: <p>Let's assume I have a WebAPI that returns a Security Token (a GUID) on the Header of a Login call.  </p>
  
  <p>Ideally we would like to receive further calls within the 30 minutes and every time we receive a call, we need to change the token to get another 30 minutes. </p>
  
  <p>Constraint: 
  I cannot use the Session.</p>
  
  <p>What's the right way to set an expiration on a specific Header value on a WebAPI environment?</p>