The problem happened when a user purposely failed 3 login attemps to site that's hosted on IIS 7.0 and all you got on the screen was a blank IE page with "Done" in the status. So what is going on here? Did the user really failed the authentication or not? The answer is yes, the user did failed the...