Protected SignalR endpoint webhosted or selfhosted can be accessed by authenticated C# and/or JS client