An authorization framework for NodeJS apps