authorize and authenticate with web.config

Signed-off-by: Andre Dublin <81dublin@gmail.com>