Add jBCrypt password hashing library.
Add denied page.
Add HashingService (from BrowseRight).
Add filter which requires login.