Securing the web application