How to implement authentication via web.config

Include the <authorization> element.

<authorization>
	<deny users='?'/>
</authorization>