Deliberately vulnerable, simple web applications to demonstrate web security