Fuzzing the OWASP JuiceShop API with OWASP ZAP