Node.js: Securing RESTful APIs