10 Essential Best Practices to Keep Your APIs Secure