title: Web API 2 AccessFailedCount not Incrementing When using Token Based Authentication
body: <p>I am using Webapi with Identity2.0  AccessFailedCount, LockoutEndDateUtc is not incermenting on Invalid UserName and Password. I have implement Token Based Authentication provided by WebAPI. Please help .</p>
  
  <p>here is code Snippet  </p>
  
  <pre><code>        using (UserManager&lt;ApplicationUser&gt; userManager = userManagerFactory)
          {
              ApplicationUser user = await userManager.FindAsync(context.UserName, context.Password);
  
              if (user == null)
              {
                  context.SetError("invalid_grant", "The user name or password is incorrect.");
                  return;
              }
              if (await userManager.IsLockedOutAsync(user.Id))
              {
                  context.SetError("lock_out", "The account is locked.");
                  return;
              }
  
              if (!userManager.IsEmailConfirmed(user.Id))
              {
                  context.SetError("inactive_user", "The user is not active. Please check your Register Email to verify.");
                  return;
              }
  
              ClaimsIdentity oAuthIdentity = await userManager.CreateIdentityAsync(user,
                  context.Options.AuthenticationType);
              ClaimsIdentity cookiesIdentity = await userManager.CreateIdentityAsync(user,
                  CookieAuthenticationDefaults.AuthenticationType);
              AuthenticationProperties properties = CreateProperties(user);
              AuthenticationTicket ticket = new AuthenticationTicket(oAuthIdentity, properties);
              context.Validated(ticket);
              context.Request.Context.Authentication.SignIn(cookiesIdentity);
          }
  </code></pre>