login finish; edit web.config to allow http put