Start small: added http_basic_authenticate to my Rails API, with .env variables in order not to accidentally save the username and password in the public repo. Learned that using .env in Rails is outdated, I should just use encrypted credentials...well, next lesson then!