Demonstration of an API security framework using UAA