How you can organize the security section of web.config file?

<authentication mode = " [Windows/Forms/Passport/None] ">

    <forms name = " [name] " loginUrl = " [url] " >

        <credentials passwordFormat = " [Clear, SHA1, MD5] ">

            <user name = " [username] " password = " [password] " />

        </ credentials>

    </forms>

    <passport redirectUrl = "internal" />

</ authentication>


<authorization>

    <allow users = " [mention list of users separated by comma] "

              roles = " [mention list of roles separated by comma] " />

    <deny users = " [mention list of users separated by comma] "

              roles = " [mention list of roles separated by comma] " />

</ authorization>


<identity impersonate = " [true/false] " />