Token based API Security in TEN Steps