BU Creative Web App Penetration Testing vs Lambda-Proxy (2026)