add owin helpers to access 2fa cookie value; updated sample for owin