How do you perform API testing, and what tools do you typically use to validate request and response payloads?