Web application penetration test of an app for purchasing insurance policies