Added LINQPad script to get the current issuer key thumbprint and updated web.config with it
Authentication is now required for the whole application
Viewing the information about the logged in username on the homepage
Configured AntiForgery to use the correct unique claim type
See http://brockallen.com/2012/07/08/mvc-4-antiforgerytoken-and-claims/ for more info
Added ability to log out
Added code to refresh the issuer key when it changes
Added release config transforms to use a different Azure AD audience URL and force HTTPS