Describe your approach to API testing. What tools do you use, and how do you validate complex JSON payloads?