Authentication (Passport) enough for security with Node js backend server? : <p>Is PassportJS using Facebook Authentication enough for an iOS backend with Node JS?</p>

<p>I have the toobusy package as well to decline requests when things get to busy (I'm guessing it would be good for DDOSes).</p>

<p>I'm thinking of using nginx as a reverse proxy to my Node.JS server as well.</p>

<p>What are some more security measures that can scale? Some advice and tips? Anything security related that I should be concerned about that PassportJS's authenticated session can't handle?</p>
