amend

I can’t find out if I’m supposed to create an http or https server for node.js hosted on heroku. Apparently, paid heroku apps now handle ssl and receives over https by default. When the app receives an https request,…

I’m using passport.js with a local strategy for authentication, and I’m using sessions/cookies for keeping state and keeping the user logged in. I’m not very knowledgeable in security (that’s why I’m asking here), but…