ASP.NET MVC application with OWIN wsfederation middleware, showing GraphClient 1.0 and WsFederationAuthenticationNotifications SecurityTokenValidated event