Don and Jason (do you have a blog, Jason? I'd love to put you in my sharpreader!) just opened to public a very, very useful collection of patterns related to security and web services. Check it out, start here