I have a ASP.NET Core application and also, I have a REST API as a resource which i want to protect. I use IdentityServer4