Some Recent API Security Related Gaffes , And How They Might Have Been Avo ided