secured stream between the user and nodejs logic