From the newgroups: “The other problem I found was the returnurl from ASP.Net was incorrect as ASP.Net gives you the underlying template file as the return url; if used the author will get an error when they log back in. What I wanted was the CMS returnUrl.”
What he’s saying is that web.config-based authorization and Context.RewritePath() don’t play well together. Looks like we got bitten by that, too. Ouch.
Andrew Grumet's Weblog 
fgsd
LikeLike