Review all uses of `Url` and `HttpContext` to make sure they are not used after we do `ConfigureAwait(false)` (like in private controller methods).

Review all `HttpContext.Current` usage to replace with passed-in `HttpContextBase` parameters.