Looking at ASP.NET Identity (new membership implementation in ASP.NET), I came across this interface when implementing my own UserStore:
UserStore
//Micro
I observed the SecurityStamp to be required for token verification.
To repo: Set SecurityStamp to null in the databsae Generate a token (works ok) Verify token (fails)