Authorize attribute tag not working ASP web API

Question

I am expecting a 401 when the user isn\'t logged in. However the authorization tag isn\'t working. I authenticate a user using AzureAd through Office 365 accounts. The login con