Browsing: API Security Best Practices