https://www.arunangshudas.com/blog/10-best-practices-for-securing-your-backend/