A working draft of my node.js security book