Improve API Security: Reference Architecture