Trying to restrict access to folder but can't

I have the following in my web.config which is in the httpdocs(root) directory. It doesn't prevent me from accessing the directory ls_admin thatI am trying to protect  <AUTHENTICATION mode="Forms"> <FORMS> <CREDENTIALS passwordFormat="Clear"> <USER password="removed" name="removed" /> <USER password="removed" name="removed" /> </CREDENTIALS> </FORMS>< ...