IRoleCheckingStrategy
AuthorizeInstantiation
AuthenticatedWebSession.AuthenticatedWebSession(Request)
AuthorizeAction