Timing issues

[independentid]

Two timing issues:

1. What if the source of state change is not the issuer of the event. How can we track the actual state change time (e.g. Logout time)
2. An event such as a Logout event that does not properly handle time of logout could cause unanticipated effects when a logout occurs because the user's sessions were reset and the intent is for the user to log back in immediately. If timing is not handled correctly, the user may have established a new session with a relyparty before it received the previous logout message.