If you're using the SSL enabled ports, you shouldn't need a VPN. The SSL should keep you plenty private enough from your ISP. But it won't hurt if you use it and want the additional anonymity.
If you're not port forwarding, you shouldn't need to setup the login forms. That is, unless you wanna keep people on your home network off of those pages (if they find them).
Port forwarding should only be necessary if you plan to access your download apps outside your network. Remote management.