A tool for supporting developers in analyzing the security of web-based security protocols