- fixed SecurityStampValidator as the framework provided one uses the owin context to find the usermanager