Show how to prevent infinite challenge loop in OWIN samples

[josephdecock]

Forbid instead of issuing a new challenge when user is already authenticated.