Web application penetration test of an online prize draw of a Swiss retailer