https://ibrahimsharif.com/posts/securing-wordpress-rest-api/