Protect your API endpoints