Web application security audit of an internet banking solution