GCIH - Web Application Attacks - API Authentication and Authorization Bypass