What tools and approaches do you use to perform API testing, and how do you validate response payloads?