Another thing to note; if the Secondary server is in Firewall mode, how would it check with AD to make sure the user exists?  The whole Primary site is down?

Do you mean by creating users in firewall mode and rejecting unknown users? I thought Firewall mode only works on a proxy basis?