Authorization for Images and Asp page at subdirectory level

Hi,
i need to put password protected Folder this Folder contains the aspx , asp pages and Iamges
i done well at local server it working fine also, but on the server its apply only for aspx pages not for asp and Images.....
whenever i try to see the aspx page I am redirected to login page (weel) but if i try to see any asp or any other image inside this folder i am getting the page or image......
my configuration is:
<authentication mode="Forms">
      <forms loginUrl="Scripts/Login.aspx" name="RGoldSite" path="/" timeout="180">
      </forms>
    </authentication>
<location path="scripts">
    <system.web>
      <authorization>
        <deny users ="*"/>
  ...