http://msdn.microsoft.com/en-us/library/e1f13641.aspx
http://msdn.microsoft.com/en-us/library/h6bb9cz9.aspx
<httpRuntime apartmentThreading = "[True|False]" appRequestQueueLimit = "number" delayNotificationTimeout = "number" enable = "[True|False]" enableHeaderChecking = "[True|False]" enableKernelOutputCache = "[True|False]" enableVersionHeader = "[True|False]" encoderType = "string" executionTimeout = "number" maxQueryStringLength = "number" maxRequestLength = "number" maxUrlLength = "number" maxWaitChangeNotification = "number" minFreeThreads = "number" minLocalRequestFreeThreads = "number" relaxedUrlToFileSystemMapping = "[True|False]" requestLengthDiskThreshold = "number" requestPathInvalidCharacters = "string" requestValidationMode = "[2.0|4.0]" requestValidationType = "string" requireRootedSaveAsPath = "[True|False]" sendCacheControlHeader = "[True|False]" shutdownTimeout = "number" useFullyQualifiedRedirectUrl = "[True|False]" waitChangeNotification = "number" />
<sessionState
mode="[Off|InProc|StateServer|SQLServer|Custom]"
timeout="number of minutes"
cookieName="session identifier cookie name"
cookieless=
"[true|false|AutoDetect|UseCookies|UseUri|UseDeviceProfile]"
regenerateExpiredSessionId="[True|False]"
sessionIDManagerType="session manager type"
sqlConnectionString="sql connection string"
sqlCommandTimeout="number of seconds"
allowCustomSqlDatabase="[True|False]"
useHostingIdentity="[True|False]"
stateConnectionString="tcpip=server:port"
stateNetworkTimeout="number of seconds"
customProvider="custom provider name"
compressionEnabled="[True|False]"
sqlConnectionRetryInterval="number of seconds">
<providers>...</providers>
</sessionState>