Top 3 biggest mistakes enterprises make in application security