Hi,
I discussed your questions with our developer and unless you have the full source code you will need to use 
Custom security handler. Alternatively, you could develop custom membership provider, but it could be more difficult.
As for your second question - you will need to add the whole 
custom event handler project and modify only the security handler.
Best regards,
Ivana Tomanickova