Sample demonstrating authentication using request headers and claims