使用IIS7在集成模式下使用自定义httphandler保护静态html文件

My asp.net application is not using formsauthentication. Instead we make a call to database, check username//password and save the value in session if user is logged in.My asp.net application is not using formsauthen