Looking into login mechanics found an interesting set of options for me, I can either go whole hog with .net Identity or implement the entire thing in 4 lines of code. But if I use .net Identity I would have most of the user admin functionally together and could allow people to use facebook or twitter log ins, which may be the stupidest thing I've ever considered around here, or it might be mildly interesting to people. Effectively any Open ID login could be used if I set it up properly, if anyone is interested let me know, otherwise I'm going to take the short way around and implement the user admin stuff based on code I already have.

Right now I'm working on BBCode handling and getting a pager together. With those I'll be at the point I could put a sample site out there for people to try and break. Even if it doesn't have user functionality.