A proof of concept CAS-protected Node.js app