Web Application Security Testing?

Web applications for security vulnerabilities during testing, testing of the main items for what? I know of the OWASP top ten but are there other tests that should be run as well?  What type of authentication test should be run?  Any help is appreciated.