When Membership.GetUser is null or nothing, but login succeeds (and fails on a bad password), check the path as such…
<authentication mode=”Forms” >
Mine was set to path =”blahblah/blah”. I changed it to “/” and things worked again.
Has something to do with browsers rejecting the cookie because it didn’t look like it was coming from the right server.