Useful sample for common use case where user adds custom Authentication, a form login, *and* global method security all the the same application.
Dave Syer