I am able to access page even after session time out.

I have an ASP.NET web application written in C# and ASPX.



The Web.config file contains the following tags within <system.web> </system.web> along with some other tags.



        <sessionState timeout="1"/>

        <authentication mode="Windows"/>

        <authorization>

            <deny users="?"/>

            <allow users="*"/>

        </authorization>

        <identity impersonate="true"/>



I opened the web application remotely using a web browser. Waited for 5
minutes and tried to refresh the page. The page appeared again. I was
expecting it to be unavailab ...