Use ASP.NET FormsAuthentication to handle staff and user logins