How would you validate JSON payloads, authentication flows, and rate limits for RESTful APIs in Arlo systems?
