Welcome to the Q&A Forum

Hello! Is it just you have both www and non-www versions of all pages that are resolving?  If so you can add one 301 redirect rule in IIS to redirect all of them from one to the other and solve the problem.  If not, feel free to provide more detail and I or someone else can chime in. EDIT I just took a quick look and it looks like that's part of the problem. Follow the above and it should take care of it.  I also noted the non-SSL version is 302 redirecting to the SSL version.  That is an incorrect implementation.  You want that to be a 301 so if someone links to the non-SSL version you get credit for that link juice. Cheers!

I think something missed about duplicate content is what Google actually does with it. Say you have those two urls, Google is not going to penalize your whole site for the duplicate content. What they do is try to figure out which one should be shown, and sandbag the other one. More than likely the login one would be sandbagged, because it is not linked. You could always add a canonical url to really solve the issue.

Thank you for taking the time to respond, Billy. I did see that J May Photo has literally no inbound links to the "funky" URL, but hadn't checked ShanRenee's links yet. Appreciate your time.