title: HTTP Error 404.15 The request filtering module is configured to deny a request where the query string is too long
body: <p>I have created a brand new web form application from Visual Studio 2013 and set the following in the web.config file: </p>
  
  <pre><code>&lt;authentication mode="Forms"&gt;
      &lt;forms defaultUrl="~/Home.aspx" loginUrl="~/Login.aspx" 
          slidingExpiration="true" timeout="2880" /&gt;
  &lt;/authentication&gt;
  &lt;authorization&gt;
    &lt;deny users="?" /&gt;
  &lt;/authorization&gt;
  </code></pre>
  
  <p>When I run the project I get 404.15 error.<br>
  This is not an MVC site. <br>
  I found a similar error that said I need to remove the "deny users" but I don't want to do that. <br>
  I need all users to be directed to the login page if they have not authenticated. <br>
  * <a href="https://stackoverflow.com/questions/19601412/new-asp-net-mvc5-project-produces-an-infinite-loop-to-login-page">New Asp.Net MVC5 project produces an infinite loop to login page</a> * <br>
  I also tried this but I get "This webpage has a redirect loop"<br>
  * <a href="https://stackoverflow.com/questions/11636386/how-to-configure-the-web-config-to-allow-requests-of-any-length">How to configure the web.config to allow requests of any length</a> * <br>
  <br>
  EDIT: Added more links to explain the problem.<br>
  So I found and article about login page loops. <br>
  * <a href="http://erlend.oftedal.no/blog/?blogid=55" rel="nofollow noreferrer">http://erlend.oftedal.no/blog/?blogid=55</a> * <br>
  So if I add a break point on the ProcessRequest I can see that there is an infinite loop calling the Login.aspx page. <br>
  So the problem does not seem to be that the URL is too long but more likely that there is an infinite loop calling the Login.aspx page.<br>
  If I place a breakpoint on the Page_Load in side the Login.aspx page, the breakpoint never gets hit.<br>
  There must be something higher up causing the redirect.<br></p>