title: IAuthorizationFilter not called every time
body: <p>We use an <code>IAuthorizationFilter</code> class to filter all request, and check if custom user claims are still present (multi-tenant app) in the authentication cookie. These information are essentials for the rest of the application. If these informations are not present, we redirect to the Login page.</p>
  
  <pre><code>    public class TokenAuthorizationFilter : IAuthorizationFilter, IAsyncAuthorizationFilter
      {
  
          public TokenAuthorizationFilter()
          {
              // Some dependency injection ...
          }
  
          public void OnAuthorization(Microsoft.AspNet.Mvc.Filters.AuthorizationContext context)
          {
              CheckToken(context);
          }
  
          public Task OnAuthorizationAsync(Microsoft.AspNet.Mvc.Filters.AuthorizationContext context)
          {
              return CheckToken(context);
          }
  }
  </code></pre>
  
  <p>And we register our filter like this </p>
  
  <pre><code>    services.AddMvc(config =&gt;
      {
          config.Filters.Add(typeof(TokenAuthorizationFilter));
      });
  </code></pre>
  
  <p>And the controller's action that I want to access is very simple :</p>
  
  <pre><code>[Authorize(Policy = "TokenValid")]
  public class HomeController : AjaxBaseController
  {
      public IActionResult Index()
      {
          return View();
      }
  }
  </code></pre>
  
  <p>We even not reached the Policy of our <code>AuthorizeAttribute</code>. As I can see in the stacktrace, Identity is attempting to create a <code>Microsoft.AspNet.Identity.SignInManager</code> somewhere in the middleware after checking for a <code>CookieAuthenticationOptions</code>, I assumed that he's attempting to re-login the user, but it's not checking for my Filter ? Login is very special in our application, so I don't want to let Identity log automatically our user. I can reproduced this issue when the authentication cookie expired.
  Any ideas ? Thanks !</p>