web api prevent multiple requests