I thought about that, mgebhard. Is cookie authentication secure in .net core mvc? This is a production app and I don't want someone to be able to forge a cookie and break in.

Also, will cookie auth allow the user's username to be access on a razor page via `UserManager.GetUserName(User)`? I have a view that looks like this:

@using Microsoft.AspNetCore.Identity

@inject SignInManager<. . .> SignInManager
@inject UserManager<. . .> UserManager

<ul class="navbar-nav">
    @if (User.Identity.IsAuthenticated)
    {
        <li class="nav-item">
            <a id="manage" class="nav-link text-dark" title="Manage">Hello @UserManager.GetUserName(User)!</a>
        </li>
    }
</ul>