>I am working on a front end for our VFP app using West Wind and have to add some level of security. I need to get the user name and password obviously and keep track that that person was logged in. When they leave the site I need to log them out.
>

There is no way to log somebody out of a web app because web apps are disconnected in nature. You have no idea if they left or if they are just taking their sweet time on your page. The best you can do is allow a timeout to log them out.