How the New Web Application Architecture is Changing Web Application Security