https://androboot.com/2020/12/best-practices-for-web-api-security-api-security-standards/