Asp.net general settings on form Authentication

Asp.net general settings on form authentication:
1: Add form authentication in web. config;
 
<Authentication mode = "Forms">
<Forms name = "auth" loginUrl = "index. aspx" timeout = "30"> </forms>
</Authentication>
<Authorization>
<Deny users = "? "/>
</Authorization>
2: If a registration page exists, anonymous users should also be allowed to call the registration page for registration;
The following code should be between <configuration> <system. web> and not between <system. web>... </system. web>;
---------------- Indicates that anonymous users are allowed to access the userReg. aspx page.
<Location path = "userReg. aspx">
<System. web>
<Authorization>
<Allow users = "? "/>
</Authorization>
</System. web>
</Location>
3. After Successful Logon, you must create an authentication ticket to indicate that the authenticated user has been valid;

If (LOGIN successful)

System. Web. Security. FormsAuthentication. SetAuthCookie (user name, false );