common security pitfalls