Using old school WIF 3.5 / ASP.NET 3.5 for this particular ASP.NET web app...
How do I allow anonymous users to access my timeout page?
I tried this in web.config but it still seems to require authentication:
<location path="~/UserSecurity/Timeout.aspx"><system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>