title: .Net Core 2 WebAPI returns 405 instead of 401 (oidc)
body: <p>We have Angular 4 frontend, .ner core 2 WebAPI and external oidc idm system. We managed to have signin / signout flows successfully from WebAPI. After user is signed out, if it now requests any page (by url) which requests WebAPI with [Athorize] attributes, WebAPI returns 405 instead of 401. What is the way to intercept the response in WebAPI and, when user is not authorized, return 401 as frontend side expects it?</p>