sql-server csharp authentication dotnet dependency-injection clean-architecture authorization bcrypt entity-framework-core ef-core code-first registration-service password-hashing brute-force-protection