Updating default script

Changing the default script to use the api more, changing to run in IIS
by default, and adding <httpRuntime requestValidationMode="2.0" /> to
prevent ASP.NET from flagging the Iron Python script as being unsafe