Or you can add static methods to the global.asax class. I used this approach for the security layer.