How to secure your web app against common attacks