https://www.step2gen.com/blogs..../api-security-what-i