Demystifying Host Card Emulation Security - Best Practices for Implementing Secure Mobile Payments