diff --git a/TuneRipper.Api/web.config b/TuneRipper.Api/web.config
index 6bbda9b..0605e1f 100644
--- a/TuneRipper.Api/web.config
+++ b/TuneRipper.Api/web.config
@@ -5,30 +5,16 @@
       <handlers>
         <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified" />
       </handlers>
-      <aspNetCore processPath="dotnet" arguments=".\TuneRipper.Api.dll" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" hostingModel="inprocess">
+      <aspNetCore processPath="dotnet" 
+                  arguments=".\TuneRipper.Api.dll" 
+                  stdoutLogEnabled="true" 
+                  stdoutLogFile=".\logs\stdout" 
+                  hostingModel="inprocess"
+                  forwardWindowsAuthToken="false">
         <environmentVariables>
           <environmentVariable name="ASPNETCORE_ENVIRONMENT" value="Production" />
         </environmentVariables>
       </aspNetCore>
-      <rewrite>
-        <rules>
-          <rule name="Redirect to HTTPS" stopProcessing="true">
-            <match url=".*" />
-            <conditions>
-              <add input="{HTTPS}" pattern="off" ignoreCase="true" />
-            </conditions>
-            <action type="Redirect" url="https://{HTTP_HOST}/{R:0}" redirectType="Permanent" />
-          </rule>
-        </rules>
-      </rewrite>
-      <!-- Security headers -->
-      <httpProtocol>
-        <customHeaders>
-          <add name="X-Content-Type-Options" value="nosniff" />
-          <add name="X-Frame-Options" value="DENY" />
-          <add name="X-XSS-Protection" value="1; mode=block" />
-        </customHeaders>
-      </httpProtocol>
     </system.webServer>
   </location>
 </configuration>
\ No newline at end of file