Renamed csrf-demo to app-sec-demo