JWT
https://wildermuth.com/2017/08/19/Two-AuthorizationSchemes-in-ASP-NET-Core-2
https://pioneercode.com/post/authentication-in-an-asp-dot-net-core-api-part-3-json-web-token
Refresh Token
http://www.c-sharpcorner.com/article/handle-refresh-token-using-asp-net-core-2-0-and-json-web-token/