Where to store server side cookie in NodeJS?
You need to implement a session store for saving session token. Though MongoDB itself can do that, Redis is one of the best option. If you don't use session store, scaling up in a cluster model will end up in trouble, as the different app server instances won't be able to identify a user authorized by another server.