title: Forms Authentication web.config set up
body: <p>Is this specification correct in the root web.config file? I haven't used a child web.config in the protected folder.</p>
  
  <pre><code>&lt;system.web&gt;
    &lt;authentication mode="Forms"&gt;
      &lt;forms name=".ASPXAUTH" loginUrl=""&gt;
      &lt;/forms&gt;
    &lt;/authentication&gt;
  &lt;/system.web&gt;
  </code></pre>
  
  <p>Then another specification for system.web also in root web.config:</p>
  
  <pre><code>&lt;location path="to protected folder"&gt;
    &lt;system.web&gt;
      &lt;authorization&gt;
        &lt;deny users="?"/&gt;
      &lt;/authorization&gt;
    &lt;/system.web&gt;
  </code></pre>
  
  <p></p>