Forms authentication roles, location, redirect best practice

I am using Forms authentication with the AspNetSqlMembershipProvider.

In my web.config I have
 <authentication mode="Forms">
            <forms name=".ASPXAUTH" loginUrl="~/secure/Login.aspx" defaultUrl="~/user/Home.aspx" timeout="5" slidingExpiration="true" protection="All"  />
 </authentication>

 <location path="Administrator">
    <system.web>
      <authorization>
        <allow roles="Administrator" />
        <deny users="*"/>        
      </authorization>
    </system.web>
  </location> ...