[keycloak-user] Testing Application Security