title: Authentication cookie not being read when using [Authorize] attribute
body: <p>I need help configuring my asp.net application using cookie authentication. This is what my configuration looks like:</p>
  
  <pre><code>public void ConfigureAuth(IAppBuilder app)
  {
      app.CreatePerOwinContext(ApplicationDbContext.Create);
      app.CreatePerOwinContext&lt;ApplicationUserManager&gt;(ApplicationUserManager.Create);
  
      app.UseCookieAuthentication(new CookieAuthenticationOptions()
      {
          AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
          CookieSecure = CookieSecureOption.SameAsRequest,
      });
  
      app.UseExternalSignInCookie(DefaultAuthenticationTypes.ExternalCookie);
  
      PublicClientId = "self";
      OAuthOptions = new OAuthAuthorizationServerOptions
      {
          TokenEndpointPath = new PathString("/Token"),
          Provider = new ApplicationOAuthProvider(PublicClientId),
          AuthorizeEndpointPath = new PathString("/api/Account/ExternalLogin"),
          AccessTokenExpireTimeSpan = TimeSpan.FromDays(14),
          AllowInsecureHttp = true
      };
  
      app.UseOAuthBearerTokens(OAuthOptions);
  }
  </code></pre>
  
  <p>My login api route is:</p>
  
  <pre><code>[Route("Login")]
  [HttpPost]
  [AllowAnonymous]
  public IHttpActionResult Login(RegisterBindingModel model)
  {
      var user = UserManager.Find(model.Username, model.Password);
  
      if (user != null)
      {
          Authentication.SignOut();
          var identity = UserManager.CreateIdentity(user, DefaultAuthenticationTypes.ApplicationCookie);
          identity.AddClaim(new Claim(ClaimTypes.Role, "IsAdmin"));
          Authentication.SignIn(new AuthenticationProperties() { IsPersistent = true }, identity);
  
          return Ok("Success");
      }
  
      return Ok();
  }
  </code></pre>
  
  <p>Calling login returns a cookie named <strong>.AspNet.ApplicationCookie</strong> but when I call the <strong>logout</strong> action:</p>
  
  <pre><code>[Route("Logout")]
  [HttpPost]
  public IHttpActionResult Logout()
  {               
      Authentication.SignOut(CookieAuthenticationDefaults.AuthenticationType);
      return Ok();
  }
  </code></pre>
  
  <p>I get the following error: <strong>Authorization has been denied for this request</strong></p>
  
  <p>What am I doing wrong?</p>
  
  <p>Note: I decorated the controller with the <strong>[Authorize]</strong> attribute</p>