Protect APIs against attacks with this security testing guide