RESTHost Guide - Securing your API