ต้องการให้ Login และกำหนดสิทธิ์ ต้องทำยังไงครับ asp.net (c#)

	public void Page_Load(object sender, EventArgs e)
	{
		if (Session["strUser"]==null) {
			Response.Redirect("Login.aspx");
			Response.End();
		} else {
			this.lblStatus.Text = "Welcome [" + Session["strUser"] + "]";
		}
	}

 protected void Login1_Authenticate(object sender, AuthenticateEventArgs e)
        {


            string username = Login1.UserName;
            string pwd = Login1.Password;

            string strConn;
            strConn = WebConfigurationManager.ConnectionStrings["NUTAILOR"].ConnectionString;
            SqlConnection Conn = new SqlConnection(strConn);
            Conn.Open();

            string sqlUserName;
            sqlUserName = "SELECT username,password FROM password";
            sqlUserName += " WHERE (username = '" + username + "')";
            sqlUserName += " AND (password ='" + pwd + "')";
            SqlCommand com = new SqlCommand(sqlUserName, Conn);

            string CurrentName;
            CurrentName = (string)com.ExecuteScalar();

            if (CurrentName != null && username == "test")
            {
                Session["UserAuthentication"] = username;
                Session.Timeout = 1;
                Response.Redirect("Default.aspx");
            }
            else if (CurrentName != null && username != "test")
            {
                Session["UserAuthentication"] = username;
                Session.Timeout = 1;
                Server.Transfer("employee.aspx");
            }
            else
            {
                Session["UserAuthentication"] = "";
            }
        }
    }

  protected void Page_Load(object sender, EventArgs e)
        {
            if (Session["UserAuthentication"] != "test")
            {
                Response.Redirect("employee.aspx");
                Response.End();

            }
        }

  if (Session["UserAuthentication"] == null)
            {
                Response.Redirect("Login.aspx");
                Response.End();

            }

if(Session["UserAuthentication"] == null or Session["UserAuthentication"] == "")
{
}

/* for loop execution */
         for (int a = 10; a < 20; a = a + 1)
         {
            Console.WriteLine("value of a: {0}", a);
         }
         Console.ReadLine();
      }