Secure token service for node.js