Also, authentication mode="windows" is just for IE, so I think you should rather use mode="Forms".