authentication redirection encryption web authentication password authentication live forwarding man-in-the-middle attack identity authentication internet security microsoft .net authentication password protection identity 2.0 land attack domain names security logic bombs