I have two web apps built in c# and published to azure, I am trying to embed one into another using an iframe but not sure how to set up my webconfig to allow site A to only