Web application security audit (security check of a multi-tenant capable web based facility management solution)