asp.net form 验证问题

测试工程：
Login.aspx
Default.aspx
First.aspx
Second.aspx

web.config
Global.asax


代码：
Login.aspx
C# code:

protected void Submit_Click(object sender, EventArgs e)
{
if ((this.UserEmail.Text == "1") && (this.UserPass.Text == "2"))
{
//Create Authentication Ticket
FormsAuthenticationTicket authTicket = new
FormsAuthenticationTicket(1,
this.UserEmail.Text.Trim(),
DateTime.Now,
DateTime.Now.AddMinutes(HttpContext.Current.Session.Timeout),
this.Persist.Checked,
this.UserEmail.Text.Trim(), "/");

string encryptedTicket = FormsAuthentication.Encrypt(authTicket);
HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
authCookie.Expires = DateTime.Now.AddMinutes(HttpContext.Current.Session.Timeout);
Response.Cookies.Add(authCookie);

Response.Redirect("Default.aspx");
}
else
this.Msg.Text = "Invalid credentials. Please try again."