Application security audit of 4 web applications