资源

basic web form : http://www.asp.net/identity/overview/getting-started/adding-aspnet-identity-to-an-empty-or-existing-web-forms-project
custom Implement IUser and IUserStore 等等 : http://www.asp.net/identity/overview/extensibility/overview-of-custom-storage-providers-for-aspnet-identity
change primary string to int : http://www.asp.net/identity/overview/extensibility/change-primary-key-for-users-in-aspnet-identity
confirm email + reset password : http://www.asp.net/mvc/overview/security/create-an-aspnet-mvc-5-web-app-with-email-confirmation-and-password-reset
password protect hack : http://tech.trailmax.info/2014/06/asp-net-identity-user-lockout/
thrid party login : http://www.asp.net/mvc/overview/security/create-an-aspnet-mvc-5-app-with-facebook-and-google-oauth2-and-openid-sign-on
role base : http://bitoftech.net/2015/03/11/asp-net-identity-2-1-roles-based-authorization-authentication-asp-net-web-api/
transaction : identity 是用全局 db 通过 perOwinContent 来获取的单列，所以直接获取来begin transact 就可以了
two factory （没学）: http://bitoftech.net/2014/10/15/two-factor-authentication-asp-net-web-api-angularjs-google-authenticator/
oauth2.0 :
http://bitoftech.net/2014/09/24/decouple-owin-authorization-server-resource-server-oauth-2-0-web-api/
http://bitoftech.net/2014/10/27/json-web-token-asp-net-web-api-2-jwt-owin-authorization-server/