What is your strategy for testing APIs, and what tools do you use to validate payload structures and response times?