title: anti-forgery token issue on browser back and resubmit
body: <p>In my MVC5 application, implemented anti-forgery token. When user launch and login, it works. In case if user click the browser back after login and resubmit the with different credentials, it show </p>
  
  <pre><code>The provided anti-forgery token was meant for user "xxxx", but the current user is "yyyy"
  </code></pre>
  
  <p>In the login controller, I have tried something like </p>
  
  <pre><code>public ActionResult Index()
  {
      if (User != null &amp;&amp; (User.Identity.IsAuthenticated || User.Identity.Name != ""))
      {
          FormsAuthentication.SignOut();
          Session.Abandon();
          return RedirectToAction("Index");
      }
      return View();
  }
  </code></pre>
  
  <p>But the system doesn't fire the action in this case. </p>