Web Application Security Guide/Miscellaneous points