Web app security basics for founders: 10 plain questions to ask your developers about logins, roles, passwords, secrets, updates, backups and incident plans.