Authorization cannot be delayed because Allow or Deny has been called, or the method is not being called from the event handler. ...