Thanks. Yes currently this will only work with Express.js.
Agree that the token mechanism isn't the optimum right now, as on updating library you will have to reconfigure it. I will try what you suggested, of keeping it in the client code.
About load this puts, all the work is done post sending the response the client from your node.js app so it should not impact response time at all. While manual benchmarking I couldn't see even 10s of microseconds difference while using this.