[keycloak-user] Securing an ASP.NET Core 2.1 Web API with KeyCloak