Is Your Web App as Secure as You Think? Discover the Truth with Web Application Security Auditing