Web application security audit of an internet banking application and a chat feature