https://techliphant.com/blog/securing-laravel-apis-best-practices-for-robust-protection/