Cannot figure out how to validate token in .NET Core Web API