<authentication mode="Forms">
      <forms loginUrl="login.aspx" defaultUrl="Default.aspx"/>
    </authentication>
    <membership defaultProvider="SqlProvider" userIsOnlineTimeWindow="15">
      <providers>
        <add name="SqlProvider"
             type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=XXXXXX"
                connectionStringName="ConnectionString"
                enablePasswordRetrieval="false"
                enablePasswordReset="true"
                requiresQuestionAndAnswer="false"
        requiresUniqueEmail="true"
                applicationName="/"
                passwordFormat="Hashed"
              minRequiredPasswordLength="5"
                minRequiredNonalphanumericCharacters="0"
                />
      </providers>
    </membership>
    <roleManager enabled="true" defaultProvider="SqlProvider" cacheRolesInCookie="true">
      <providers>
        <add name="SqlProvider"    type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=XXXXXX"
                connectionStringName="ConnectionString" />
      </providers>
    </roleManager>
   
   
    <customErrors mode="RemoteOnly" defaultRedirect="notfound.aspx">
            <error statusCode="403" redirect="notfound.aspx" />
            <error statusCode="404" redirect="notfound.aspx" />
        </customErrors>