The SecurityTokenParameters and SecurityToken tuple specified for use in the security header must both be null or must both ...