Red-Team Thinking for Developers: Building More Secure Apps