<configuration>

    <!-- store the database connection info here -->
    <appsettings>
        <add key="DSN" value="server=localhost;uid=sa;pwd=;database=Conf" />
    </appsettings>

    <!-- mark the web to use forms-based cookie authentication -->
    <security>
       <authentication mode="Cookie">              
          <cookie cookie=".ASPXAUTH" loginurl="Login.aspx" decryptionkey="autogenerate"> </cookie>
       </authentication>
    </security>
    
    <!-- TO DO: mark the Checkout.aspx page as available only to authorized users -->

    <!-- mark the OrderList.aspx page as available only to authorized users -->
    <location path="OrderList.aspx">
        <security>
            <authorization>
                <deny users="?" />
            </authorization>
        </security>
    </location>

    <!-- mark the OrderDetails.aspx page as available only to authorized users -->
    <location path="OrderDetails.aspx">
        <security>
            <authorization>
                <deny users="?" />
            </authorization>
        </security>
    </location>

</configuration>