I have several CSS / JS folders for which I don't require authenticated access. Specifically, I don't want the session cookie flowing for requests to these resources since it a fair sized cookie.
Is this sufficient to influence ASP.NET to not require session cookie?
<location path="~/Scripts">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
Go to the complete details ...