Using OWASP ZAP to scan for vulnerabilities