Securing ASP.NET Core 2.0 Applications with JWTs