title: What's the best way to protect all actions from a Controller except one (Login)?
body: <p>Currently I have <code>[Authorize]</code> attributes on all of the methods on my <code>AdminController</code> except for the <code>Logon</code> action.</p>
  
  <p>What's the <em>cleanest</em> way to invert this, so I don't have to remember to add the attributes to all methods, but rather add an attribute only to the method(s) that should be available without being logged in?</p>
  
  <p>Would I be better just moving the <code>Logon</code> action to its own controller, and applying the <code>[Authorize]</code> attribute to the AdminController class?</p>