identity verification compliance glba banking consulting loans management man-in-the-middle attack finance bank criminal background check hipaa live audit identity authentication microsoft .net authentication logic bombs authentication identity 2.0 information security land attack