Security testing playbook for Django applications covering ORM injection, middleware gaps, auth/session flaws, and template issues