Security solution for stateless APIs