Authentication and authorization tools available in ASP.NET. What are common web application vulnerabilities, and how can you harden your applications against these? what are some of the security/logon related controls you can add to your forms? How do they work?