One thing I started to use in Express is Helmet[1] (written by the author of the article).

Also I started going through Troy Hunt's course on Pluralsight which is a real eye-opener.[2]

[1]: https://github.com/evilpacket/helmet [2]: http://www.troyhunt.com/2013/08/its-time-to-hack-yourself-fi...