Hi,
I discussed your questions with our developer and unless you have the full source code you will need to use
Custom security handler. Alternatively, you could develop custom membership provider, but it could be more difficult.
As for your second question - you will need to add the whole
custom event handler project and modify only the security handler.
Best regards,
Ivana Tomanickova