https://kokil.com.np/index.php/blog/api-security-complete-checklist