Added comment on REST lesson learned: Avoid hackable URLs