Add additional permission for IIS User.
Fix controller namespacing.
Change routes to work without IIS rewrite rule.