system.web inside of app.config file with ClientAuthenticationMembershipProvider added by default

If you are not using the ASP.NET Membership features for authentication / authorization, these entries can be removed. The XML entry is just a reference to the assembly where the membership classes are found, as is not specific to windows / web applications. ASP.NET membership can be used for both types of applications.