Testing back end security