Cleanup authentication methods

Cookie authentication now used for dashboard only.
Basic (legacy) authentication left only for admin access end-points.

Author: LorenzCK

src/Web/Web/Controllers/AdminController.cs

@@ -12,7 +12,7 @@
 namespace CodeMooc.Web.Controllers {
 
     [Route("admin")]
-    [Authorize(Policy = Startup.BasicAdministratorsPolicyName)]
+    [Authorize(Policy = Startup.LegacyBasicAdministratorsPolicyName)]
     public class AdminController : Controller {
 
         protected DatabaseManager Database { get; }

src/Web/Web/Startup.cs

@@ -21,7 +21,7 @@ public Startup(IConfiguration configuration) {
 
         public const string AdministratorsOnlyPolicyName = "AdministratorsOnly";
         public const string MembersOnlyPolicyName = "MembersOnly";
-        public const string BasicAdministratorsPolicyName = "BasicAdministratorsOnly";
+        public const string LegacyBasicAdministratorsPolicyName = "BasicAdministratorsOnly";
 
         public const string AdministratorRole = "Administrator";
         public const string MemberRole = "Member";
@@ -61,19 +61,19 @@ public void ConfigureServices(IServiceCollection services) {
                     new AuthorizationPolicyBuilder()
                         .RequireAuthenticatedUser()
                         .RequireRole(AdministratorRole)
-                        .AddAuthenticationSchemes(CookieAuthenticationDefaults.AuthenticationScheme, BasicAuthenticationSchemeOptions.SchemeName)
+                        .AddAuthenticationSchemes(CookieAuthenticationDefaults.AuthenticationScheme)
                         .Build()
                 );
                 opt.AddPolicy(
                     MembersOnlyPolicyName,
                     new AuthorizationPolicyBuilder()
                         .RequireAuthenticatedUser()
                         .RequireRole(MemberRole)
-                        .AddAuthenticationSchemes(CookieAuthenticationDefaults.AuthenticationScheme, BasicAuthenticationSchemeOptions.SchemeName)
+                        .AddAuthenticationSchemes(CookieAuthenticationDefaults.AuthenticationScheme)
                         .Build()
                 );
                 opt.AddPolicy(
-                    BasicAdministratorsPolicyName,
+                    LegacyBasicAdministratorsPolicyName,
                     new AuthorizationPolicyBuilder()
                         .RequireAuthenticatedUser()
                         .RequireRole(AdministratorRole)