API First - 3 Steps for Building Secure Apps in the Cloud