Custom config section

I've converted the SecuritySettings class into a custom config section. I've also updated the sample to use it.

I added a new setting called connectionstring so the connection string to use wasn't hard-coded.