Sample web app showing common security mistakes.