Web Application Security and the API’s They Rely On