public IPrincipal Authenticate(string user, SecureString password)
 {
     if (user == "foo" && password.StringEquals("bar"))
         return new GenericPrincipal(new GenericIdentity(user), new string[] { });
     return new GenericPrincipal(new GenericIdentity(""), new string[] { }); ;
 }