Fixed formatting of web.config file
Added  relaxSslRequirements="true" so that OAuth2 stuff works locally over vanilla HTTP.
Fixed a bug caused by incorrect parameter ordering in SymmetricCryptoKey constructor in the fake crypto key store.