I want to make the API available to certain login users only. [OpenApiIgnore] can help to hide the controller but I need a way to control the API document display after auth