ASP.NET identity 2 still authenticated after signout

Hi, I have a web application using identity 2. I logged in to my systen and did one form post action and captured that action with fiddler. Then I logged out from the system which uses AuthenticationManager.SignOut(). Then I use fiddler to post the captured one and it still went through. Is it intended or bug? I thought the cookie/session or whatever is destroyed after you sign out? (AuthenticationManager.SignOut ()) How can I prevent that? Another problem is regarding AntiForgeryToken. What is the life span on the token. I tried to use very old (at least one week) token value and the process still went through. I thought those tokens are per session based? Thanks in advanced and sorry for my bad english.