title: Can MVC4 AllowAnonymous coexist with asp.net forms?
body: <p>We have a large ASP.NET application to which we have been adding new 'pages' using MVC3 and more recently MVC4.
  I now want to secure the MVC4 pages using the AllowAnonymous attribute on the Controller Actions.</p>
  
  <p>The Web.Config contains an authorization element thus:
      <code>&lt;authorization&gt;
      &lt;deny users="?"/&gt;
        &lt;allow users="*"/&gt;
      &lt;/authorization&gt;</code></p>
  
  <p>This takes care of the Asp.Net pages. But unfortunately, it also negates the AllowAnonymous attribute for the MVC4 apps.
  If I remove the authorization element, then the MVC4 auth works (as with the VS2012 MVC4 template web site), but by removing it, the ASP.Net pages are no longer secured.</p>
  
  <p>Has anybody had any success with a solution that comprises both Asp.Net pages and MVC4?</p>