Restrict register endpoint using ASP.NET Core Identity - C#