WP REST API Security