Reviewing our 2019 AppSec predictions: Attacks against APIs