http://andrewlock.net/introduction-to-authentication-with-asp-net-core/