title: Is there a way to make AuthorizeAttribute respond with status code 403 Forbidden rather than a redirect?
body: <p>If the user is not logged in and they request an action marked <code>[Authorize]</code>, then the response is a redirect to the Account/LogOn action (status code 302 Found).</p>
  
  <p>Is there a way to make the response be status code 403 Forbidden instead?</p>