put keys in web.config so real keys can be in web.release.config and build can work