title: Timeout not working in ASP.Net MVC FormsAuthentication
body: <p>I'm using FormsAuthentication, I'm having problems setting the TimeOut value. </p>
  
  <p>I've seen some other posts related to this, but they don't seem to be exactly my problem or the solution suggested doesn't help.</p>
  
  <p>My web.config has the following:</p>
  
  <pre><code>&lt;authentication mode="Forms"&gt;
    &lt;forms loginUrl="~/Account/LogOn"
           timeout="1"
           cookieless="UseCookies" /&gt;
  &lt;/authentication&gt;
  </code></pre>
  
  <p>I have put an AuthorizeAttribute on the controllers that I want to secure.</p>
  
  <p>I can view the .ASPXAUTH cookie (using FireCookies) and I can see that it is set to expire in 1 minute after a login.</p>
  
  <p>If I debug through my code I can see that FormsAuthentication.Timeout = 1.</p>
  
  <p>However my ticket doesn't seem to timeout in 1 minute. After 1 minute of inactivity I can still browse to controllers with AuthorizeAttribute.</p>
  
  <p>In fact I can actually delete the .ASPXAUTH cookie using FireCookies and I can still browse to controllers with an AuthorizeAttribute.</p>
  
  <p>Bizarrely after being inactive for a long time (sorry don't have an exact time - I was out for lunch!) the TimeOut occurs and I am redirected 
  to the login screen.</p>
  
  <p>Any ideas?</p>