Security is Hard: Part 1

Situation:  New website needed for Acme Corporation. The business team has decided we need more widget sales. The web team has promised more sales if they can host a new web applicat...