title: SignalR - authenticating with access token
body: <p>I've been building a web service that, up to now, consisted entirely of ASP.NET Web API calls. I now need to add SignalR into the mix but am wondering how I can keep the security aspect consistent. </p>
  
  <p>I'm currently using OAuth bearer tokens (with OWIN authentication), so my client will basically have an access_token that I'd normally simply add to the headers for any web API calls. However, how do I do the same (or similar) with SignalR? Would I authenticate when I create the connection or on each call? And, most importantly, how would I specify the access token in the first place?</p>
  
  <p>Thanks.</p>