http://www.cnblogs.com/kingmoon/archive/2011/05/03/2035696.html
http://www.cnblogs.com/xdotnet/archive/2012/03/27/aspnet_mvc4_authorize.html
http://blog.csdn.net/kenshincui/article/details/5735601
http://hi.baidu.com/jinzesudawei/item/03f5a2dc63972bba32db9001