Securing Web messaging enabled applications