Describe your experience testing APIs. What tools do you use, and how do you validate response codes and payloads?