I am developing an asp. Net api and I need the best practice to secure authentication not only using JWT and is the most secure way