Enable Conditional Access policies to block legacy authentication