Yii2 Security Best Practices for Enterprise Applications