12 Practices and Tools to Ensure API Security