Asp.net Core Web Api Authentication Types