I've been working with 'thePhile' Users/Accounts system. How would I 
implement a Logout/Timeout feature using forms based authorization that 
requires all users to login before accessing the site?

Your advice will be greatly appreciated.

Thanks,

Andrew Pasetti

look at the web.config file under thephile

<authentication>
make timeout="1" so you can see it in 1 minute

add
<authorization>
 <deny users="?"/>
</authorization>

That should do the trick.

I read the book from cover to cover and loved it.  Jessey Liberty's book 
is also pretty good despite the annoying vb asp.net code.

Good luck.