在使用JS到REST API的ASP MVC应用程序中处理安全性

I have an ASP MVC4 web site. Originally, most of the content was served via controllers as one would expect. I have moved the data storage from SQL Server to MongoDB. I have also added a lot of ajax to update data client side, without a full refresh. This is working fine, but my controllers now have I have an ASP MVC4 web site. Originally, most o