Tutorial from Auth0: https://auth0.com/blog/node-js-and-express-tutorial-building-and-securing-restful-apis