BlowDart has the right answer for the Invalid Viewstate problem. It's probably your app pool being recycled and changing the encryption key.
See these posts for support:
Erratic Invalid Viewstate issue in a .NET application
Making user login persistant with ASP .Net Membership