Empathy for the Developer Lessons Learned Building An Application Security Module