Common API Attacks and Prevention