Deliberately insecure JavaEE application