A Holistic Approach to Securing SaaS