http://www.cnblogs.com/JimmyZhang/archive/2008/12/07/1349457.html http://www.cnblogs.com/xdotnet/archive/2007/10/24/aspnet_formsauthentications.html