Application security audit of a website