https://www.trickyenough.com/an-overview-about-mobile-app-api-security/