29.07.2016 - Make sure that there is no login action in other controllers than SiteController . If there are (and for example they are for different purposes), block them explicitly .