Secure coding principles checklist for developers