Implementing authentication using SOAP headers for ASP.NET web service