Add .woff mime map to fix #5
Handle dangerous requests as per asafaweb.com
Remove excessive headers as per asafaweb.com
Move .woff and Authority settings to Web.Release.config