Added code to delete content from App_Data at App_Start if blob storage is used
Added URL rewrite rule to require HTTPS
Debugging hack!
Changed from DPAPI based token encryption to certificate-based
More hacks
Switched from certs to machine keys for session cookie protection