Limiting access to elmah page using a controller (the right way) without having to create roles that are stored somewhere and linked to windows identities.