Hi everybody,
I have been developing my site for a while and it turns out I had quite the wrong Idea about how this all works. I have a login control on my login page that takes a username and password. It's then compared against the database to validate (I don't use any of the Membership or Roles from ASP.Net btw, and I'm too far into it now to change my DB structure). If the check returns true it also returns a custom MySiteUser object which is basically just strings containing some other contact details and so forth.
Now, what I've been doing is doing this when the checking method returns:
Session.Timeout = 5;
Session.Add("LoggedInUser", MySiteUserInstance);
string uName = MySiteUserInstance.First.Trim() + " " + MySiteUserInstance.Last.Trim();
FormsAuthentication.SetAuthCookie(uName, false);
Response.Redir ...
Go to the complete details ...