Walking the Tight Rope of REST API Security: Best Practices Will Hold You Steady