title: Asp.net core 1.1 validate security stamp isn't working
body: <p>Ok so i've been struggling with this for 2 days now, and can't find anything about it.</p>
  
  <p>i'm using asp.net core 1.1 and i already implemented the identity in my system and it works great. but my issue is that user stays online after updating the security stamp.</p>
  
  <p>i tried set <code>SecurityStampValidationInterval</code> to <code>zero,1</code> seconds but it doesn't seem to effect anything.</p>
  
  <p>at this point i'm not really sure if it is a bug? or i'm doing something wrong?</p>
  
  <p>here is how my <code>IdentityOptions</code> looks like:</p>
  
  <pre><code>services.Configure&lt;IdentityOptions&gt;(options =&gt;
              {
                  options.Tokens.PasswordResetTokenProvider = _defaultTokenProviderName;
  
                  options.Password.RequireDigit = true;
                  options.Password.RequiredLength = 6;
                  options.Password.RequireLowercase = true;
                  options.Password.RequireUppercase = true;
                  options.Password.RequireNonAlphanumeric = false;
  
                  options.User.RequireUniqueEmail = true;
  
                  options.User.AllowedUserNameCharacters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_.";
  
                  options.SecurityStampValidationInterval = TimeSpan.Zero;
  
  
  
                  options.Cookies.ApplicationCookie.CookieName = "Identity_cookie";
                  options.Cookies.ApplicationCookie.ExpireTimeSpan = TimeSpan.FromHours(1);
                  options.Cookies.ApplicationCookie.SlidingExpiration = true;
  
              options.Cookies.ApplicationCookie.Events = new CookieAuthenticationEvents()
              {
                  OnRedirectToLogin = (context) =&gt;
                  {
                      var cul = context.HttpContext.Features.Get&lt;IRequestCultureFeature&gt;();
                      var lang = cul.RequestCulture.Culture.TwoLetterISOLanguageName;
  
  
                      context.Response.Redirect($"/{lang}/Account/Login?{context.Options.ReturnUrlParameter}" +
                           $"={System.Net.WebUtility.UrlEncode(context.Request.Path + context.Request.QueryString)}");
                      return Task.FromResult(0);
                  },
  
              };
              });
  </code></pre>
  
  <p>and this is how i update the security stamp:</p>
  
  <pre><code>user.Blocked = !user.Blocked;
  await _userManager.UpdateSecurityStampAsync(user);
  await _userManager.UpdateAsync(user);
  </code></pre>
  
  <p>Thanks in advance.</p>