Rest API Best practices