Security audit of two web forms of a city administration using a web applications penetration test of the forms as well as a design review of the handling of personal data