https://www.quickread.in/building-secure-apis-with-expressjs/