Text this: Securing ASP.NET core endpoints :