api security loyalty