preventing access to anonymouse users

Hi in my Asp.net website, I wish to ensure that anonymous users cannot gain access to forms, except the login page

my default login page is in /mydir/app//login.asp
However this will redirect to /mydir/app/sps/spsDefault.aspx" if Application("sps") is true, which is usually the case
other wise it will redirect me to /mydir/app/default.asp
When I put have the following code in my web config file, it does prevent me from
accessing the forms without logging in, however when I do log in it takes me to mydir/app/default.asp everytime and it will not allow me to go into /mydir/app/sps/spsDefault.aspx at all or anywhere in the /mydir/app/sps directory, please tell me what I'm doing wrong.

 <!--<authentication mode="Forms">
      <forms loginUrl="/mydir/app//login.asp" defaultUrl="/mydir/app/sps/spsDefault.aspx" />
    </authentication>
 &n ...