added web app security lab schema