API Security Best Practices: Key Considerations for Holistic API Protection