https://medium.com/@itamey3/securing-rest-apis-best-practices-for-authentication-authorization-and-input-validation-68933c21548a