Web and mobile application security audit of an IT and service management software