https://securityexpress.info/cloudflare-kills-http-a-win-for-api-security/