title: Asp.net mvc [Authorize] attribute will return http 302 instead of http 401 if the authorization fail
body: <p>I have created a new asp.net mvc 5 web application and I use individual accounts (form authentication) authentication. this will build a full Account controller.
  Then I created a new controller named People , and I add [Authorize] attribute before it as follow:-</p>
  
  <pre><code> [Authorize]
      public class PeopleController : Controller
      {
  </code></pre>
  
  <p>Then I try to directly access the controller without login, so I was redirected to the login page. But what I have noticed is that using IE F12 developer tool, the http status will be 302 and not 401 , although according to http standards if the request fail authentication then the application should return http 401, this what I get:-</p>
  
  <p><img src="https://i.stack.imgur.com/2Lyat.png" alt="enter image description here"></p>
  
  <p>Can anyone advice on this? I mean should any application be fully compliance with the http standards? Or there is no problem of redirecting users to login page if the user is not authenticated without raising an http 401 error (as the default asp.net mvc is doing)?
  Thanks</p>