authorization-nodejs registration & authorization logic hash password jwt Token (access token) roles access deny/allow (admin, user)