returned the authorization configuration in the global web.config