Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication
msdn.microsoft.com/en-us/library/aa302388.aspx