They Do not make reference to any roll-your-personal authentication protocols you will have made making use of login webpages, etc. I'll use "login" to check with authentication and authorization by approaches in addition to RFC2617 I do think 403 is ideal fitted to articles that isn't served. In asp.net This http://pigpgs.com