interesting article. I just wanted to notice there's already a component for authentication and authorization in .NET - PortSight Secure Access (http://www.PortSight.com/SecureAccess) and it's also available as a FREE COMMUNITY EDITION. It supports not only ASP.NET but also WinForms and Web Services.

Regards,

Petr Palas