Experimenting with custom authentication in ASP.NET MVC 4