How can I implement a login wall for expired or inappropriate pages?
<p>I am writing a website that very explicitly requires a login wall.</p>

<p>Visitors should be required to log in before they are allowed to view a page.</p>

<p>The page being built depends very much on the user's "ID". I am not sure how or where to store the user's login.</p>

<p>I am not sure whether I should use a session variable (e.g. <code>Session["userId"]</code>), or some other method. The problem I see with session variables is that it's difficult to <em>time out</em> sessions.</p>

<p><em>Note: I'm using C# 3.5 with ASP.NET in Visual Studio 2008.</em></p>
