Use DI activated options for auth middlewares

UseXXX() now use DI activated options
Use ExternalAuthenticationOptions instead of DefaultSignInAs