You have to set the CookiePolicyOptions to check, and then cookies your code sets the middleware filters them from my understanding