CustomAuthorizationAttr
Custom authorization attribute sample for ASP.NET MVC
The asp.net mvc is manage authorization in the attribute class. The default authorization is owin context, but you want to change an another method that same as Session you have to looking here.