Node.js complete reference guide
Chapter 18 - Securing the Application