Windows Identity Foundation provides a rich API for modeling user information. It uses Claims as its basis and is better model than just roles. Also, WIF caches the user claims in cookies but it has a cookie splitting algorithm in case the cookie is too small. Dominick adapted this to forms, so it might be worth checking out.