CISC 475 - ASP authorization and authenication