<configuration> 
  <system.web>
    <authentication mode="Forms">
      <forms name="TestAuthCookie" loginUrl="login.aspx" timeout="30">
        <credentials passwordFormat="Clear">
          <user name="user1" password="pass1"/>
          <user name="user2" password="pass2"/>
        </credentials>
      </forms>
    </authentication>
  </system.web>
  <location path="admin">
    <system.web>
      <authorization>
         <deny users="?" /> 
      </authorization>
    </system.web>
  </location>
    <system.web>
        <customErrors mode="Off"/>
    </system.web>
</configuration>