5-Step Checklist For Web App Security Testing