You can use this as the login page.
Retrieves username,password and a list of pagenumbers(ACL) that the user has access to view.
------------------
<CFIF IsDefined("URL.Verify"

AND URL.Verify IS
NOT "">
<CFIF IsDefined("FORM.Username"

AND FORM.Username IS NOT "">
<CFIF IsDefined("FORM.Password"

AND FORM.Password IS NOT "">
<CFQUERY NAME="Auth_Query" datasource="#Application.DSN#" dbtype="ODBC">
SELECT * FROM dbo.Authentication
WHERE Username = '#FORM.Username#'
AND Password = '#FORM.Password#'
</CFQUERY>
<CFIF #Auth_Query.RecordCount# IS 0>
<script language="javascript">
alert ("Invalid username/password combination.
Please try again."

;
self.location="login_index.cfm";
</script>
<CFABORT>
<CFELSE>
<CFLOCK scope="Session" timeout="3" type="Exclusive">
<CFOUTPUT>
<CFSET SESSION.USERNAME = Auth_Query.Username>
<CFSET SESSION.PASSWORD = Auth_Query.Password>
<CFSET SESSION.ACL = Auth_Query.ACL>
</CFOUTPUT>
</CFLOCK>
<CFLOCATION URL="login_MainMenu.cfm">
</CFIF>
</CFIF>
</CFIF>
<CFELSE>
<html><head><title>Administration Area - Coastal Federal Intranet</title>
<LINK REL="STYLESHEET" TYPE="text/css" HREF="../styles/cfed_style.css">
</head><body>
<TABLE align="center" width="400"><TR><TD align="center" bgcolor="green">
<TABLE align="center" width="400" bgcolor="#ffffff"><TR><TD align="center">
<IMG SRC="../images/logo.gif" WIDTH="156" HEIGHT="106" ALT="Intranet Administration Area" BORDER="0">
</TD><TD><CFFORM action="login_index1.cfm?Verify=User" method="post"><br>
<TABLE>
<TR><TD class="dropbox"><b>Username</b></TD><TD><CFINPUT name="Username" size="15" maxlength="15" REQUIRED="yes" Message="Username field is blank!"></TD></TR>
<TR><TD class="dropbox"><b>Password</b></TD><TD><CFINPUT name="Password" type="password" size="15" maxlength="15" REQUIRED="yes"Message="Password field is blank!"></TD></TR>
<TR><TD colspan="2"><INPUT type="submit" value="Login" class="sbutton" ALT="Login" TITLE="Login"></CFFORM></TD></TR>
</TABLE>
</TD></TR></TABLE>
</TD</TR></TABLE>
</body></html>
</CFIF>
--------------------------
Use this to check if their access level allows them
to view the specific page.
--------------------------
<!---- Page Access Number
<CFSET PageAccessNum = 1>
<CFIF NOT ListContains(SESSION.ACL, 99)>
<CFIF NOT (IsDefined("SESSION.USERNAME"

)
OR NOT (IsDefined("SESSION.PASSWORD"

)
OR NOT ListContains(SESSION.ACL,PageAccessNum)>
<script language="JavaScript">
alert ("Invalid username/password combination.
Please try again."

;
self.location="../login_index.cfm";
</script>
<CFABORT>
</CFIF>
<CFELSE>
<!-----Page Contents----->
</CFIF>
Thanks,
Dave