A Security-focused HTTP Primer