Testing Api Security