Secure folder (deny/allow users)

Hi,
I am trying to secure some folders, but when users log in, all of them can access to that page
Heres my web.config file


<system.web>
     <authentication mode="Forms">
         <forms name=".ASPXFORMSAUTH" loginUrl="Login.aspx" protection="All" timeout="100" />
    </authentication>

    <roleManager enabled="false"></roleManager>
</ system.web>
<location path="Admin">
    <system.web>
      <authorization>
        <allow users="admin" />
        <deny users="*" />
      </authorization>
    ...