Behavioral API security middleware for Express — detects bots, scrapers and session hijacking in real time