BaxBench: Can LLMs Generate Correct and Secure Backends?