Premature disposal of WindowsIdentity in async controller method #255

[Authorize]
[RoutePrefix("identity")]
public sealed class IdentityController : ApiController
{
    [HttpGet]
    [Route("1")]
    public async Task<String> GetIdentity1Async(CancellationToken cancellationToken)
    {
        var identity = (WindowsIdentity)this.User.Identity;
        using (identity.Impersonate())
        {
            await Task.Delay(1, cancellationToken)
                      .ConfigureAwait(true);
        }

        return identity.Name;
    }

    [HttpGet]
    [Route("2")]
    public async Task<String> GetIdentity2Async(CancellationToken cancellationToken)
    {
        await Task.Delay(1, cancellationToken)
                  .ConfigureAwait(true);

        var identity = (WindowsIdentity)this.User.Identity;
        using (identity.Impersonate())
        {
            await Task.Delay(1, cancellationToken)
                      .ConfigureAwait(true);
        }

        return identity.Name;
    }
}