Looking for a library to use and noticed you use rand to generate api keys. You should use random_bytes or similar to securely do this. Rand is not appropriate.