#32 - Port comment and flow cleanup from Katana.

src/Microsoft.AspNet.Security.Cookies/CookieAuthenticationHandler.cs

@@ -210,7 +210,7 @@ namespace Microsoft.AspNet.Security.Cookies
                         Context,
                         Options.CookieName,
                         cookieValue,
-                        cookieOptions);
+                        signInContext.CookieOptions);
 
                     var signedInContext = new CookieResponseSignedInContext(
                         Context,
@@ -238,7 +238,7 @@ namespace Microsoft.AspNet.Security.Cookies
                     Options.CookieManager.DeleteCookie(
                         Context,
                         Options.CookieName,
-                        cookieOptions);
+                        context.CookieOptions);
                 }
                 else if (_shouldRenew)
                 {

src/Microsoft.AspNet.Security.Cookies/Notifications/CookieAuthenticationNotifications.cs

@@ -95,10 +95,10 @@ namespace Microsoft.AspNet.Security.Cookies
         }
 
         /// <summary>
-        /// Called when a Challenge, SignIn, or SignOut causes a redirect in the cookie middleware
+        /// Implements the interface method by invoking the related delegate method
         /// </summary>
         /// <param name="context">Contains information about the event</param>
-        public void ApplyRedirect(CookieApplyRedirectContext context)
+        public virtual void ApplyRedirect(CookieApplyRedirectContext context)
         {
             OnApplyRedirect.Invoke(context);
         }

src/Microsoft.AspNet.Security.Cookies/Notifications/CookieResponseSignOutContext.cs

@@ -26,7 +26,7 @@ namespace Microsoft.AspNet.Security.Cookies
 
         /// <summary>
         /// The options for creating the outgoing cookie.
-        /// May be replace or altered during the ResponseSignIn call.
+        /// May be replace or altered during the ResponseSignOut call.
         /// </summary>
         public CookieOptions CookieOptions
         {

src/Microsoft.AspNet.Security.Cookies/Notifications/ICookieAuthenticationNotifications.cs

@@ -39,7 +39,7 @@ namespace Microsoft.AspNet.Security.Cookies
         void ApplyRedirect(CookieApplyRedirectContext context);
 
         /// <summary>
-        /// 
+        /// Called during the sign-out flow to augment the cookie cleanup process.
         /// </summary>
         /// <param name="context">Contains information about the login session as well as information about the authentication cookie.</param>
         void ResponseSignOut(CookieResponseSignOutContext context);