Defending Web Applications Security Essentials