ASP.NET Forms Authentication considered broken | Hacker News Reader