title: Is the Authorize attribute in ASP .NET MVC used for Authentication as well as Authorization?
body: <p>I'm reading up on ASP .NET MVC, and I just got to a section talking about the Authorize attribute.  It's saying that the Authorize attribute is used to check that a user is authenticated against a Controller.  Is this true?  I know that the attribute is designed to be used for authorization purposes, but is it also a best practice to use this attribute for authentication?</p>
  
  <p>If not, what is the best practice for <em>verifying</em> (not performing) authentication?</p>
  
  <p>If so, why is it done this way?  Am I missing something?</p>