I have a webforms project that uses forms auth that I want to add WebAPI controllers into. I've got everything set up, but the site's forms auth (set up in the web.config) seems to prevent access to the API controller functions. It always sends a redirect back to the login page.

Can I have my controllers exposed to anonymous users while keeping the rest of my pages protected behind forms auth still?