REST API Guard