I am using SimpleMembership Provider in my ASP.NET MVC 4 project. Why the following code in web.config doesn't protect the content of the folder for unauthorized users?
<location path="Content/documents">
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</location>