Part 2: Secure API development