REST API Security with Java Spring Boot - What & How