more failed wcf security experiments