Securing WCF REST services for smartphone clients