miniprofiling CookieAuthenticationOptions OnValidateIdentity?