I'm looking for some direction on how best to begin the process of integrating a web app written in classic ASP to DNN, particularly with regard to security.

The security for our existing application operates on a SQL Server user table, with a username and plain-text password.  The user logs in, and her user ID and other identifying properties are stored in cookies.  Pretty common (albeit outdated) scenario. 

I've established DNN as a subweb, and am beginning to migrate content to ASP.NET. 

MY QUESTION:  Is there a way to move the login to DNN, and continue to operate the classic ASP pages based on cookies? 

• Does the DNN user entity store values in cookies?  Session variables?  If not, can it be tweaked to operate like this?
• Are there resources for learning how to encrypt/hash plaintext passwords to DNN?
• Am I thinking about this the right way?  I have to think that someone's tackled this scenario before.

Thanks!!