Add BadRequest(ModelState) action result.
Add unit tests for MVC authentication filters.