ASP.NET - Secure a web page

For Authetication: What are the other alternatives to securing web pages:
1) Forms Authetication
2) Storing Session Variable
Session("Key") = "True" Please advice of others?
Secondly, should session variables be stored in process or database?
...