https://www.talkingdotnet.com/how-to-implement-single-authorization-policy-in-asp-net-core/