Web app to demonstrate declarative and programmatic-mix security.