asp.net authentication and more!

[mehdi_mousavi]

Hi folks,
I've got a asp.net web service that implements the authentication in
the form of FormsAuthentication, Tickets and the like by having a web
method prototyped as "void Login(string strUsername, string
strPassport)". The question is that wether this is the official way to
secure a web service? (albeit, along the SSL/TSL channel).

The second question is that what is the official way of disabling the
default user interface of asp.net web services including but not
limitted to browsing .asmx files and/or the operations it supports.

Any help would be highly appreciated,

Cheers
Mehdi