Temporary I want to restict access to site for all users except "host" and "admin". As I understand, I have to insert the following lines into <system.web> section of web.config file:

        <authorization>
            <allow users="host, admin" />
            <deny users="*" />
        </authorization>

But I got the error:

The resource cannot be found.

Ok, I understand that the required page is absent and I need to specify correct login page. How to do it?

Thanks

PS. Maybe such method is wrong. Please give right direction...