How to Build a Secure REST API with OpenID Connect