title: How to hold the cookies claims updated with MCV5/OWIN
body: <p>We’re working on an OWIN MVC5 project. We use an own implementation of <code>IUserStore&lt;T&gt;</code> to integrate the user-management which is part of our companies framework. So far this works fine.
  We want to provide role membership and other security configuration through claims. I have seen (and quickly tested) the ways of either implementing <code>IUserClaimStore&lt;T&gt;</code> or of attaching a <code>ClaimsIdentityFactory</code> to the UserManager.</p>
  
  <p>In both scenarios, I see the issue that the claims are stored in the user’s cookie and when a role or another claim changes behind the web app (through another application which directly accesses the storage of the user management), the users cookie contains the old claims and the user has too much or too less permissions than she ought to have.</p>
  
  <p>A possibility that came into my mind is, to check at every request or at requests in some time interval, if the backend-configuration of the users claims has been changed, and if yes, to refresh the users cookie.  </p>
  
  <p>Is this the right approach or does MVC5/Owin spare a more elegant/efficient way to comply with this requirement. If it is the right and only approach, where would be the most efficient place to check and refresh the cookies information?</p>