Microsoft IIS: WebHits Authentication Bypass