perf: optimize authorization scoreline and workers

Tiku.Api/Configuration/AuthenticationExtensions.cs

@@ -209,7 +209,11 @@ internal static class AuthenticationExtensions
         if (session is null)
         {
             context.Fail("Session, identity, membership, tenant or role state is no longer valid.");
+            return;
         }
+
+        context.HttpContext.RequestServices.GetRequiredService<IRequestSecurityState>()
+            .SetValidatedSession(session);
     }
 
     private static async Task WriteTenantConflictChallengeAsync(JwtBearerChallengeContext context)