Reducing Risks in Web Application Development