Use DI activated options for auth middlewares

UseXXX() now use DI activated options
Use ExternalAuthenticationOptions instead of DefaultSignInAs
#39 - Port the OAuth Bearer middleware from Katana.