ASP.NET

  void Login1_LoggingIn(object sender, LoginCancelEventArgs e)
    {
        string username = Login1.UserName.Trim();
        if (!string.IsNullOrEmpty(username))
        {
            MembershipUser user = Membership.GetUser(username);
            if (user != null)
            {
                // Only adjust the UserName if the password is correct.  This is more secure
                // so a hacker can't find valid usernames if we adjust the case of mis-cased
                // usernames with incorrect passwords.

                if (Membership.ValidateUser(user.UserName, Login1.Password))
                {
                    Login1.UserName = user.UserName;
                    CheckBox Remember = (CheckBox)Login1.FindControl("RememberMe");

                    if (Remember.Checked == true)
                    {
                        Response.Cookies["UserName"].Value = Login1.UserName;
                        Response.Cookies["UserName"].Expires = DateTime.Now.AddDays(7);
                        Response.Cookies["Password"].Value = Login1.Password;
                        Response.Cookies["Password"].Expires = DateTime.Now.AddDays(7);
                    }
                    else
                    {
                        Response.Cookies["UserName"].Expires = DateTime.Now.AddDays(-7);
                        Response.Cookies["Password"].Expires = DateTime.Now.AddDays(-7);
                    }
......

 <authentication mode="Forms">
      <forms timeout="30"  protection="All"
slidingExpiration="true" loginUrl="http://localhost/OliveTreeNetwork/login.aspx" cookieless="UseCookies"/>
    </authentication>