From Risks to Remediation: Building Secure Apps with API Security