Securing the API lesson