I read about API protection - Sanctum & Passport, but none of these seems what I can accomplish with my app since it\'s a little specific and simplified in a way.