Securing Web Apps for Production and DevOps Environments