NodeJS - Securing API calls

See this thread