Authentication Now work in site

           I am using Asp.Net Forms Authendication. In this method i set permission denied to a folder(contais zip files and aspx files) for all users. In localhost it works in fine way. In localhost it not allowed any one to see the files of this folder. But after uploading files to website, server only authendicate aspx files. When user try to see the aspx files its not allowed and redirecded to login page. But when the user try to see the zip files its open and start to download.
 
This error not come in localhost.

...