.NET 8 Authentication with Identity in a Web API using Bearer Tokens and Cookies