Asp.Net 用户验证(自定义IPrincipal和IIdentity) http://www.cnblogs.com/JimmyZhang/archive/2008/12/07/1349457.html