securing api requests