Securing Api Gateway