Authentication-Security

I learn about authentication & security while scatch a webapp including..

1. post method when user register and login
2. encrypt password on database with mongoose-encrypt
3. use dotenv & gitignore for aviod public API key or any key
4. hash password with md5
5. Using Passport.js to add cookies and sessions
6. Oauth: Facebook&Google login with passport