https://katanaproject.codeplex.com/workitem/490 https://github.com/aspnet/Security/issues/780 https://github.com/aspnet/Security/pull/286
