When MVC met Asp.net WebForms

I recently came across a scenario at work where I was getting a looping or cycling of authorization on a website.

Turns out this web.config setting was denying all the access while...

<authorization>
      <deny users="?"/>
    </authorization>

these sections

<location path="path1">
    <system.web>
      <authorization>
        <allow users="*"/>
      </authorization>
    </system.web>
  </location>
  <location path="path2">
    <system.web>
      <authorization>
        <allow users="*"/>
      </authorization>
    </system.web>
  </location>
  <location path="path3">
    <system.web>
      <authorization>
        <allow users="*"/>
      </authorization>
    </system.web>
  </location>

 were giving permissions to the pertinent paths.

I found this out after soliciting some help from a coworker who'd been working on migrated Asp.net applications to MVC.