title: how to disable auto login in thinktecture IdentityServer
body: <p>i have a MVC app with authorization managed by identityserver. When i access first time to my web, it is redirect to identityserver loggin page and after i am redirected to my web again.</p>
  
  <p>My problem is, if i logout of identityserver, when i access again to my web (with identityserver authorization) i am redirected to identityserver but login is done automatically alowing me access to my web without put user/pass in identityserver.  </p>
  
  <p>I supose it is because cookie is still alive in client (if i delete manually in my browser all cookies then user/pass is required).</p>
  
  <p>How can i disable auto login (force that user/pass is always required) ?</p>
  
  <p>my startup client configuration is like:</p>
  
  <pre><code> app.UseCookieAuthentication(new CookieAuthenticationOptions
          {
              LoginPath = new PathString("/Home/Logged/"),
              AuthenticationType = "Cookies",
              ExpireTimeSpan = TimeSpan.FromDays(2),
              SlidingExpiration = true,
              CookieName = ".AspNet.MyApp"
  
          });
  
  
          app.UseOpenIdConnectAuthentication(new OpenIdConnectAuthenticationOptions
          {
              ClientId = "MyApp",
              Authority = IS_URL,
              RedirectUri = localHostURL + "/Home/Logged/",
              PostLogoutRedirectUri = localHostURL + "/Account/Login/",
              ResponseType = "code id_token token", 
              Scope = "openid profile read write sampleApi",
              SignInAsAuthenticationType = "Cookies",
  
              UseTokenLifetime = true,
  
              Notifications = new OpenIdConnectAuthenticationNotifications
              {
                  SecurityTokenValidated = async n =&gt;
                  {
                      var nid = new ClaimsIdentity(
                          n.AuthenticationTicket.Identity.AuthenticationType,
                          "given_name",
                          "role");
  
                      // get userinfo data
                      var userInfoClient = new UserInfoClient(
                          new System.Uri(n.Options.Authority + "/connect/userinfo"),
                          n.ProtocolMessage.AccessToken);
  
                      var userInfo = await userInfoClient.GetAsync();
                      userInfo.Claims.ToList().ForEach(ui =&gt; nid.AddClaim(new Claim(ui.Item1, ui.Item2)));
  
                      //keep the id_token for logout
  
                     nid.AddClaim(new Claim("id_token", n.ProtocolMessage.IdToken));
  
                     // add access token for sample API
                     nid.AddClaim(new Claim("access_token", n.ProtocolMessage.AccessToken));
  
                      // keep track of access token expiration
                      nid.AddClaim(new Claim("expires_at", TimeSpan.FromDays(2).ToString()));
  
                      // add some other app specific claim
                      nid.AddClaim(new Claim("app_specific", "some data"));
  
                      n.AuthenticationTicket = new AuthenticationTicket(
                          nid,
                          n.AuthenticationTicket.Properties);
                  },
                  RedirectToIdentityProvider = n =&gt;
                  {
                      if (n.ProtocolMessage.RequestType == OpenIdConnectRequestType.LogoutRequest)
                      {
                          var idTokenHint = n.OwinContext.Authentication.User.FindFirst("id_token");
  
                          if (idTokenHint != null)
                          {
                              n.ProtocolMessage.IdTokenHint = idTokenHint.Value;
                          }
                      }
  
                      return Task.FromResult(0);
                  }
              }
          });
  </code></pre>
  
  <p>Thanks in advance!</p>