web.config problems

I would like to put all my "admin" pages such as user login, default (protected page, send password, change password in an admin folder off the root directory. But if I have use the following deny user

<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>

line in my web.config (which I place inside the admin folder)any link I have on a page to another admin page always defaults back to the login.aspx.

For example:

on my login.aspx page users should be able to click on the text "forgot password" or "change password" and be directed to the corresponding sendpassword.aspx or changepass.aspx pages within the admin folder. But when the text is clicked on it just diverts back to the login.aspx page.

What am I doing wrong?

many thanks