WEB APPLICATION SECURITY BEST PRACTICES: WHAT DEVELOPERS NEED TO KNOW