minimal api create own authorisation? - C#