Authorization within subdirectories

<configuration>
   <location path="images" AllowOverride="false">
     <System.web>
       <authorization>
          <allow users="?"/> 
       </authorization>
     </System.web>
</configuration>

Also my web host insists on using the impersonation setting set to true.

But my images still won't load despite am logged in. Acces to the aspx pages aren't denied.
I get an x instead of my image. The images directory is under the root directory for the website. Also the images directory will have subdirectories that contain images. I've tried having them in images though. I want them to be publically accessible.