https://securitythisday.com/api-security-best-practices-for-vulnerability-mitigation/