Users are not redirected to password recovery page

Hi everyone,
 
I am stomped with trying to redirect the user to the password recovery page when they are not logged on of course. Because I have the authorization to deny all unauthenticated users access it seems the asp.net security doesn't have an exception to this rule for passwordRecovery page. Below are my settings on the web config file
        <authentication mode="Forms">
            <forms cookieless="AutoDetect" loginUrl="login.aspx" name="CHRAUT"/>
        </authentication>
        <authorization>
            <deny users="?"/>
        </authorization>

In my membership provider i have set enablePasswordRetrieval to true ...