Building in mobile application security isn’t easy: Follow best practices to secure apps up front