multi-key authorization for nodeJs