I cannot imagine how that is happening, I can only suspect that you have some custom modules installed in IIS that cause this, url rewriting module with bad rules or something of that nature. I would also suspect something wrong with the permissions on those image files but there is nothing in mojoPortal that would redirect to login for bad permissions on image files. Very strange indeed.