Keeping Web applications secure, comes down to education and management.