change web-config with REST authentication and routing params