10 things developers need to know about web application security by Nanne Baars