Update web.config to follow IIS 7.x restrictions

Fix #1536
See http://support.microsoft.com/kb/942076