Design a secure API gateway that handles authentication, rate limiting, and request routing across hundreds of downstream microservices.