In my application I need to have login/logout mechanism. So according to IASession's description I should subclass it to my session class which will store user currently logged in. Then edit the application's settings so it will use my session instead of IASession. Is it right way how to do it? -- Kamil