IMPROVING WEB APPLICATION SECURITY: THREATS AND By Microsoft Corporation *Mint*