WCF REST 4.0 Authorization with Form Based Authentication (SetAuthCookie)

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Web.Security;
using System.ServiceModel;
using System.Collections.ObjectModel;
using System.ServiceModel.Description;
using System.ServiceModel.Channels;
using System.IdentityModel.Policy;

namespace WcfRestService2
{
    [AttributeUsage(AttributeTargets.Class)]
    public class SecurityBehaviorAttribute : Attribute, IServiceBehavior
    {

        public void AddBindingParameters(ServiceDescription serviceDescription, System.ServiceModel.ServiceHostBase serviceHostBase, System.Collections.ObjectModel.Collection<ServiceEndpoint> endpoints, System.ServiceModel.Channels.BindingParameterCollection bindingParameters)
        {
            
        }

        public void ApplyDispatchBehavior(ServiceDescription serviceDescription, System.ServiceModel.ServiceHostBase serviceHostBase)
        {
            List<IAuthorizationPolicy> policies = new List<IAuthorizationPolicy>();
            policies.Add(new AuthorizationPolicy());
            serviceHostBase.Authorization.ExternalAuthorizationPolicies = policies.AsReadOnly();

            ServiceAuthorizationBehavior bh =
                serviceDescription.Behaviors.Find<ServiceAuthorizationBehavior>();
            if (bh != null)
            {

                bh.PrincipalPermissionMode = PrincipalPermissionMode.Custom;

            }
            else
                throw new NotSupportedException();
        }

        

        public void Validate(ServiceDescription serviceDescription, System.ServiceModel.ServiceHostBase serviceHostBase)
        {
           
         
        }

        internal static void ConfigureInternet(Collection<ServiceEndpoint> endpoints, bool useAspNetProviders)
        {
            foreach (ServiceEndpoint endpoint in endpoints)
            {
                Binding binding = endpoint.Binding;

                if (binding is WSHttpBinding)
                {
                    WSHttpBinding wsBinding = (WSHttpBinding)binding;
                    wsBinding.Security.Mode = SecurityMode.Message;
                    wsBinding.Security.Message.ClientCredentialType = MessageCredentialType.UserName;
                    continue;
                }
                if (binding is WSDualHttpBinding)
                {
                    WSDualHttpBinding wsDualBinding = (WSDualHttpBinding)binding;
                    wsDualBinding.Security.Mode = WSDualHttpSecurityMode.Message;
                    wsDualBinding.Security.Message.ClientCredentialType = MessageCredentialType.UserName;
                    continue;
                }
                //throw new InvalidOperationException(binding.GetType() + "is unsupprted with ServiceSecurity.Internet");
            }
        }
    }
}