Implement ASP.NET Authorization and Exception Handling Strategy