Securing Api Endpoints