The login form <masked> defined for form authentication itself requires form authentication. It should be unprotected.
Contact your website administrator to remedy this problem.