Mixing Forms and Token Authentication in a single ASP.NET Application (the Details)