Understanding API Keys and Tokens: Secure Management and Best Practices