Testing for business logic (OWASP-BL-001)