https://skonieczny.pl/2007/06/25/aspnet-ignores-configurationsystemwebauthorization-settings/