The security appears to work for the .net authentication, but when I start a new session that’s already logged in the Kentico check appear to fail on first try, then succeed.
I resolved this by removing the CMS page security and adding an [Authorize] attribute on the controller. But now I’m getting the same behaviour with the shopping cart
I appears on first visit to any page in a new session MembershipContext.AuthenticatedUser returns the public user, but on refresh of that page the user is correct
Please, sign in to be able to submit a new answer.