public IPrincipal Authenticate(string user, SecureString password) { if (user == "foo" && password.StringEquals("bar")) return new GenericPrincipal(new GenericIdentity(user), new string[] { }); return new GenericPrincipal(new GenericIdentity(""), new string[] { }); ; }