Security testing ASP.NET MVC without committing to an authentication mechanism | Hacker News Reader