https://nimbletech.org/web-application-security-checklist/