asp.net mvc4实现登陆验证

1，配置global.cs文件实现登陆验证的逻辑
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Http;
using System.Web.Mvc;
using System.Web.Optimization;
using System.Web.Routing;
using System.Web.Security;

namespace MVC4Test
{
    // 注意: 有关启用 IIS6 或 IIS7 经典模式的说明，
    // 请访问 http://go.microsoft.com/?LinkId=9394801

    public class MvcApplication : System.Web.HttpApplication
    {
        protected void Application_Start()
        {
            AreaRegistration.RegisterAllAreas();

            WebApiConfig.Register(GlobalConfiguration.Configuration);
            FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters);
            RouteConfig.RegisterRoutes(RouteTable.Routes);
            BundleConfig.RegisterBundles(BundleTable.Bundles);
        }

        protected void Application_AuthenticateRequest()
        {
            HttpCookie authCookie = Context.Request.Cookies[FormsAuthentication.FormsCookieName];
            if (authCookie == null || authCookie.Value == "")
            {
                return;
            }
            FormsAuthenticationTicket authTicket = null;
            try
            {
                authTicket = FormsAuthentication.Decrypt(authCookie.Value);
            }
            catch
            {
                return;
            }
            string[] roles = authTicket.UserData.Split(new char[] { ',' });
            if (Context.User != null)
            {
                Context.User = new System.Security.Principal.GenericPrincipal(Context.User.Identity, roles);
            }
        }
    }
}
2，在控制器中实现验证入口，并且验证方法是可以匿名访问的，否则无法进行验证。
       [AllowAnonymous]
       public ActionResult Login(LoginModel log_mod) 
       {

           if (log_mod.username == "tudouzi" && log_mod.password == "qq123456")
           {

               FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(1, log_mod.username, DateTime.Now, DateTime.Now.AddMinutes(30),false,"user");
               string encryptedTicket = FormsAuthentication.Encrypt(authTicket);
               System.Web.HttpCookie authCookie = new System.Web.HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
               System.Web.HttpContext.Current.Response.Cookies.Add(authCookie); 
               return View("Success", log_mod);
           }
           return View();
       }