National science foundation Squid web proxy OWASP CVEs for Broken Authentication in 1999