title: IIS/Coldfusion: authentication request on anonymous content
body: <p>We have an admin site that requires authentication for access. The pages on the site are wrapped in a Coldfusion custom tag, which includes all the styles and JS, as well as a few other pieces of info.</p>
  
  <p>I recently made a copy of the custom tag wrapper. I put the copy in the same directory as the original (which is mapped through the Coldfusion administrator), and renamed the file.  I added a few css/js includes in the new custom tag.  And I changed the custom tag used in the site from the old one to this new one.</p>
  
  <p>Now when non-admin users go to the site - the same users who had access to the site before and who had no problems when the site had the old custom tag wrapper - they are being asked to login multiple times.  They can hit cancel, and some of the CSS styles do not render, but the rest of the page shows up fine. </p>
  
  <p>I automatically assumed the problem was in one of the new CSS or JS files I added to the new custom tag.  But, I checked each of these files individually in IIS, and they all have anonymous access turned on.  Even removing them from the custom tag doesn't change the fact that the users are being asked to login (typically 3 times every time they go to a page). </p>
  
  <p>Anonymous access is turned on for all the existing CSS and JS files. I checked every one of the files individually (not just at the directory level, which also is set to anonymous access). Could the new custom tag itself have something to do with it.  The custom tag is mapped through ColdFusion Administrator, so I'm not sure how I would check it's IIS authentication settings... it doesn't show up there as part of the site.</p>
  
  <p>Anything else I can check???</p>