Some security fixes on IIS