Here are the relevant (I think) parts of my web.config:<authentication mode="Forms"> <forms loginUrl="Login.aspx" cookieless="UseCookies" protection="Validation" timeout="525600" requireSSL="false"/> & ...