security mindset for developers