Web application penetration test of an insurance comparison portal