we have an asp.net core MVC app hosted in IIS with Windows Authentication and we have a base class on the controllers where we get the authenticated user, but sometimes when