Nodejs security framework - promises based