removed windows authentication from web.config