WCF authenticates through message interception