[-]web.config from note sample, to allow http access