Grab bag: Application security edition