When user signout from MSCRM and the MSCRM application request and cookies was snap then replay the request again.
the data information will return all doesn't check user was signout. In this case application is fail in security test.
How should i do to fix it to check user is authenticated before allowed to call other service.
