added:
- CBC block cipher good and bad example
- URI Canonicalisation handled with ESAPI