APIs need to be designed with features such as defenses, proper authentication, batching, and throttling in mind, says Shape Security's Jarrod Overson.