I found the solution I was looking for...
<authentication mode="Forms">
<forms defaultUrl="Default.aspx" loginUrl="login.aspx"
slidingExpiration="true" timeout="20" path="/" protection="All" />
</authentication>
<authorization>
<deny users="?" />
</authorization>
