Added session validation methods. Added logout. Added AuthorizeAttribute to filter config to protect all controllers by default, excluded Register & Login with AllowAnonymous attributes.