fixes for work with disabled FormsAuthentication in IIS