https://lancecleveland.com/2016/03/24/adding-wordpress-rest-api-security-to-basic-crud-operations/