add instructions to edit Startup.Auth.cs