https://thewallacehouseblog.blogspot.com/2023/05/how-to-use-custom-authorizeattribute.html