What are some of the common methods to do simple user validation (account login)?
Also, can you have different authentication schemes per area?
Edit
According to the security expert on the MVC team
The only supported way of securing your MVC application is to have a base class with an [Authorize] attribute, and then to have each controller type subclass that base type. Any other way will open a security hole.
http://blogs.msdn.com/b/rickandy/archive/2011/05/02/securing-your-asp-net-mvc-3-application.aspx