How to secure a REST API between mobile app and the server

Follow up discussion: How to secure communication between Ionic app and the custom php REST API