\'www-authenticate\' is not exposed even I exposed it
services.AddCors(options => { options.AddPolicy("CorsPolicy",