https://www.teachbesttech.org/best-api-security-practices-for-beginners/