https://scooparticle.com/five-best-practices-for-effective-api-security/