Integrated Pipeline stopped working

Hi,

I set up the following in web.config...

Code:

    <location path="XANDY2.jpg">
        <system.web>
            <authorization>
                <deny users="*"/>
            </authorization>
        </system.web>
    </location>

...and requested the file and was redirected to the log in page. Great! ASP.net authorization working with non-asp.net files.

Then I tried adding this to web.config...

Code:

<system.webServer>
		<modules runAllManagedModulesForAllRequests="true">
            <remove name="FormsAuthentication" />
...

...and as expected I was able to request /XANDY2.jpg without having to log in.

Now, I then removed the '<remove name="FormsAuthentication" />' and I can still request /XANDY2.jpg without loggin in.

So I turned it off and now it won't come back on again! Any ideas?

Cheers, I.