I have a controller set up with Authorize and I have the authentication flow working with httponly cookies and tested with PostMan which works. It allows me to authenticate and