Thanks for reporting this, this is a bug - we should allow you to do this.
To work around the issue edit ~/web.config and locate the two instances of the following element and comment it out:
I'll check in a code fix as well.
To work around the issue edit ~/web.config and locate the two instances of the following element and comment it out:
<add name="CompositeAdministrativeAuthorization" type="Composite.Core.WebClient.HttpModules.AdministrativeAuthorizationHttpModule, Composite" />
If you make this change as part of completely deleting the ~/Composite folder you should be good.I'll check in a code fix as well.