Secure Node Apps Against OWASP Top 10 - Authentication & Sessions