04 Security & Authentication - Pioneer18/Rent-A-Car GitHub Wiki Helmet: http headers Encryption and Hashing Passport-local Passport-JWT with HttpOnly Cookies: browser javascript cannot interact with cookies bcrypt & crypto CORS