Ask HN: Suggestions for good books on designing web applications?

I've wanted to build a fairly complex, scale-able web application for a while (think like a CRM,) but when I try to do it, I feel overwhelmed with areas where I'm not sure the best way to structure the code. I'm overwhelmed when thinking about CSRF / XSS / SQL Injection, but also when thinking about thinks like, where should I store my application logic, how should I write the authentication layer, et. cetera.

I'm looking for suggestions on decent books that could provide a good basis on making good decisions when I design web applications in the future.