public override void Validate(string userName, string password)
    {
        WebFaultException rejectEx = new WebFaultException(HttpStatusCode.Unauthorized);
        rejectEx.Data.Add("HttpStatusCode", rejectEx.StatusCode);

        if (null == userName || null == password)
            throw rejectEx;

        if (userName == "someusername" && password == "somepassword") return;

        throw rejectEx;
    }