What is the diference between AuthenticateRequest and AuthorizeRequest
===

Can you explain the diferences between `HttpApplication.AuthenticateRequest` and `HttpApplication.AuthorizeRequest` in an `ASP.NET MVC 3` please? When they will be occurred? Assume this scenario:

My `User` has a property called `IsBanned`. And I want to check his/her `IsBanned` property in each request, and if it was `true`, I redirect the `User` to an error page. But not all request. But just requests that their action signed by `[Authorize]` attribute. OK, this type of actions, will occurs `HttpApplication.AuthenticateRequest` or `HttpApplication.AuthorizeRequest` or anything else?

I know I can check this property in `SignIn|LogOn` action. But I means this:

 - A user requests logging in
 - I check the property `IsBanned` and it was `false`
 - The user logged in
 - User view some pages of site
 - The admin banned the user (while he is logged in)
 - User requests a page (action) that have `[Authorize]` attribute
 - User is logged in (before this. remember?)
 - So I have to show the requested page
 - But the user give a banned flag by admin
 - How can I prevent user from viewing requested page?

Thanks in advance.