web.config

ASP.NET Web Forms Techniques

<configuration>

  <system.web>

    <!-- change following to true to use cookie-less sessions -->
    <!-- sessionState cookieless="false" / -->

    <!-- specify that we will use Forms authentication -->
    <!-- note that this does not apply to cookie-less version -->
    <authentication mode="Forms">
      <forms name="XroxCars" path="/" loginUrl="secure/login.aspx"
             protection="All" timeout="30" >
      </forms>
    </authentication>

  </system.web>

</configuration>