public UrlParameterAuthenticationHandler() { securityTokenDecoder = BasicSecurityTokenDecoder.Instance; }