This is not an answer to your question, but I have to give you this warning.
Do not use Flash as an authentication system!
Just two weeks ago I watched a video done by a security expert at IBM that showed how easy it is to take flash files, reverse-engineer them, and get by the authentication. It's ridiculously easy. He had some audience members shout out some web sites (big name sites) until he found one that used Flash eavily. He was into restricted adminstrator pages in less than a minutr.
You may as well do all of your authentication with client-side javascript.
Use Flash for what it's good at and what it was meant for - nice presentation. Treat Flash the way you would treat images or video files, and you can use Flash with any server-side technology you want.
When I get back to work tomorrow I'll try to find the link to the video.