Java Hurdling @ OWASP 2016