Is the API-key enough? API security issues and their fix – API-University