REST API security docs improved