Bearer token is not used by Swagger for endpoints with [authorize], but used for [AllowAnonymous] - C#