// POST api/Account/AddExternalLogin
[Route("AddExternalLogin")]
public async Task<IHttpActionResult> AddExternalLogin(AddExternalLoginBindingModel model)

AuthenticationTicket ticket = AccessTokenFormat.Unprotect(model.ExternalAccessToken);