Example of how to implement api security in a node app