public override void OnActionExecuting(ActionExecutingContext context)
{
if (!_sessionManager.IsAuthorized(context.HttpContext))
{
throw new InvalidOperationException("Can't access this area without providing a valid number-pin combination");
}
base.OnActionExecuting(context);
}
