hi. i plan to build a site and a client application as well. then the application can allow uses to login to the site. i have no experiences on this aspect. please give some suggestions that which class i should use. i think i need to post the user name and password to the server to verify. but after that how can the server know the current user is valid. i need to deal with cookie or session state? please give some comments.