Four Best Practices for Securing APIs from Data Breaches and Attacks