updating description with owasp 2013 description