Practical Tips For Defending Web Applications In The Age Of Devops