i think this should help you out. i love their tutorials...
http://aspnet.4guysfromrolla.com/articles/120705-1.aspx (its a multipart series on asp.net authentication stuff)