[rwth-security] Be careful what you pwish for – Phishing in PWA applications