Tweak web.config to remove default session encryption handling.