Securing specific files and folders

I have a folder where I store some PDFs only available for members.  I want to use asp.net memberships and roles to prevent non-members from being able to download these files.  The location of the member files is as follows:
/root/uploads/file/members/
I am trying the following, but it fails to work.
<location path="Uploads/file/members">
        <system.web>
            <authorization>
                <!--<allow roles="Members" />-->
                <deny users="*" />
            </authorization>
        </system.web>
...