The State of Securing RESTful APIs with Spring