Demonstrating Proof-of-Possession (DPoP): Preventing Illegal Access of APIs