Comprehesive security audit of web application