What tools and frameworks have you used for API testing, and how do you validate response payloads and status codes?