Not logged in - Login

What not to do in ASP.NET, and what to do instead