https://semaphoreci.medium.com/best-practices-for-securing-node-js-applications-in-production-d24b7c4981d