If Carling made web.configs....

web.config

<?xml version="1.0" encoding="utf-8"?>
<configuration>

  <system.web>
    <!--
      Set compilation debug="true" to insert debugging
      symbols into the compiled page. Because this
      affects performance, set this value to true only
      during development.
		-->
    <compilation debug="true" targetFramework="4.5" />
    
    <httpRuntime enableVersionHeader="false" relaxedUrlToFileSystemMapping="true" requestPathInvalidCharacters="" requestValidationMode="4.0" targetFramework="4.5"/>
    
    <!-- 
      httpCookies httpOnlyCookies setting defines whether cookies
      should be exposed to client side scripts
      false (Default): client side code can access cookies
      true: client side code cannot access cookies
      Require SSL is situational, you can also define the
      domain of cookies with optional "domain" property 
    -->
    <httpCookies httpOnlyCookies="true" requireSSL="false"/>
    <trace enabled="false" localOnly="true" pageOutput="false" writeToDiagnosticsTrace="false"/>

  </system.web>
  
  <system.webServer>
    <!-- GZip static file content.  Overrides the server default which only compresses static files over 2700 bytes -->
    <httpCompression directory="%SystemDrive%\websites\_compressed" minFileSizeForComp="1024">
      <scheme dll="%Windir%\system32\inetsrv\gzip.dll" name="gzip"/>
        <dynamicTypes>
          <add enabled="true" mimeType="text/*" />
          <add enabled="true" mimeType="message/*" />
          <add enabled="true" mimeType="application/javascript" />
          <add enabled="true" mimeType="application/json" />
          <add enabled="true" mimeType="application/json; charset=utf-8" />
          <add enabled="false" mimeType="*/*" />
        </dynamicTypes>
        <staticTypes>
            <add enabled="true" mimeType="text/*"/>
            <add enabled="true" mimeType="message/*"/>
            <add enabled="true" mimeType="application/javascript"/>
            <add enabled="true" mimeType="application/json"/>
            <add enabled="true" mimeType="application/json; charset=utf-8" />
            <add enabled="false" mimeType="*/*"/>
        </staticTypes>
    </httpCompression>
    
  </system.webServer>

</configuration>