Anomaly detection in API management