The file that contains the username/passwords. Because it is an asp file, you
cannot directly try to download this file to see the usernames and passwords.
The file that looks at cookies to see if you can log in, checks your authentication
status, and redirects to the login page if you are not authenticated. This file
shouldn't be "run" by itself, but rather included into the ASP file you want to
protect.