i loose my authentication ticket, but i am still able to access other web pages

[jrodguitar]

If anyone, could help me
I am trying to avoid using cookies (the actual file) but i am appending

the ticket to my URL string.
Purposely, i am not attaching it the ticket to certain pages, just to
check the security.
Unfortunately i can access those pages, but i believe i should not.
I am going from the webpages in the menu folder, to the webpages in the

mypages folder.
I secure each folder in my web app in the web.config file in the
following manner:
<location path="mypages">
<system.web>
<authorization>
<deny users ="?"/>
</authorization>
</system.web>
</location>
<location path="menu">
<system.web>
<authorization>
<deny users ="?"/>
</authorization>
</system.web>
</location>
Any ideas??
J.