fail to check username and pw

I have created a login page and create admin role + admin acc thru local host. I test the login system with a wrong pw but still the system allows.

I have created a folder "admin" and put all private pages inside and set access rule to that folder.

have I done anything wrong nor shouldn't I use localhost to check username and pw?

 

thanks!

 

here 's my code for login page

 

 <asp:Login ID="Login1" runat="server">
        <LayoutTemplate>
            <table border="0" cellpadding="1" cellspacing="0" style="border-collapse: collapse">
                <tr>
          &nbs ...