Thanks this was helpful. Only change I had to make was for this section: 
                <denyUrlSequences>
                    <add sequence="inc" />
                    <add sequence="info" />
                    <add sequence="module" />
                    <add sequence="sh" />
                    <add sequence="sql" />
                    <add sequence="\..*" />
                </denyUrlSequences>
 
I had to remove the  <add sequence="module" /> line. It gave me a 404 for the module section in the admin until I removed that.