Text this: Improving web application security:threats and countermeasures; patterns and practices