added documentation for web-security testing