If you're using bcrypt for authenticating passwords, that may end up being the most compuationally-expensive part of your entire application. Consider running

If you're using bcrypt for authenticating passwords, that may end up being the most compuationally-expensive part of your entire application. Consider running your authentication service as a separate node server so it can scale independent of the rest of your application.