Custom authorization policy for controller in ASP.NET 5

Hi,

I'm struggling a bit with the custom authorization policy described here: https://docs.asp.net/en/latest/security/authorization/policies.html

What I don't understand is the following:

Using VS2015, File --> New project, ASP.NET Web Application and selecting ASP.NET 5 Web API project template. Implementing the custom authorization policy exactly as described in the docs page, I only get the policy to trigger if I have enabled Windows Authentication on the project. Why is that? Is there anyway around this?

Documentation page has no information regarding startup.cs and relevant configuration there. Or am I missing something obvious?

Any help much appreciated.

Regards