Protecting API requests from mobile apps with device-bound hybrid digital signatures - View it on GitHub