TryHackMe Web Security JavaScript Client-Side Validation API Testing DevTools Cookies curl