4 tips to help keep your APIs safe