asp.net general settings for form authentication

asp.net asp.net general settings for form authentication:
1: In Web.config, add form certification;

<authentication mode= "Forms" >
<forms name= "auth" loginurl= "index.aspx" timeout= "></forms>"
</authentication>
<authorization>
<deny users= "?"/>
</authorization>
2: If there is a registration page should also allow anonymous users to call the registration page for registration;
The following code should be between <configuration><system.web> and should not be included in the <SYSTEM.WEB> Between </system.web>;
----------------indicates that anonymous users are allowed to access the Userreg.aspx page.
<location path= "Userreg.aspx" >
<system.web>
<authorization>
<allow users= "?"/>
</authorization>
</system.web>
</location>
3 after the successful login to create an authentication ticket, indicating that has passed the certification of legitimate users;

if (login successful)

System.Web.Security.FormsAuthentication.SetAuthCookie (user name, false);