Unifying Security Across Web, APIs and Mobile