title: Custom Authorize Filter Order Execution with ValidateAntiForgeryToken
body: <p>I am using couple of Authorize Filter on a method.</p>
  
  <pre><code>[SessionState(SessionStateBehavior.Required)]
  public class AuthenticationFilterAttribute : AuthorizeAttribute {}
  
  [HttpPost]
  [AuthenticationFilter]
  [ValidateAntiForgeryToken]
  public void SaveProgress(string data) {}
  </code></pre>
  
  <p>Both of them are authorize filter, so I expected AuthenicationFilter to run before the ValidateAntiForgeryToken filter. But the ValidateAntiForgeryToken runs before the Authentication filter.</p>
  
  <p>I know that this can be solved by the Order property. But I want to know the reason of this behaviour, and I want to make sure it executes in that order (within the corresponding filter types - authorize, action..so on). </p>