Common security mistakes you can avoid