Protecting a WCF service over the internet: authenticating and authorizing users with the ASP.NET membership and role providers