Step 4 – setting up the OWASP broken web applications project