This is caused by IIS web site configuration beyond the control of mojoPortal. You need to configure the site for anonymous authentication and disable digest or basic authentication.
The user that is the identity on the application pool needs full control over the /Data folder but it must also have at least read permission on all other files and folders to avoid such prompts.
Hope that helps,
Joe