We are in the process of creating a website that utilizes a basic JSON API (RoR) for displaying information on the page. This data is accessible to our clients, but crucial to our service, so we are taking precautions to prevent competitors from accessing our data illegitimately. How do you typically verify the legitimacy of AJAX requests made to an API?