Rethink API Security for balancing protection and ease of use