Node.js RESTful API sandboxing