auth0 Aspnet Owin Vulnerabilities