Максим

var myHeaders = new Headers();

myHeaders.append('Content-Type', 'text/xml');
myHeaders.get('Content-Type') // should return 'text/xml'

export function httpGet(url) {
  return fetch(url, {
    headers: buildHeaders(),
  })
  .then(checkStatus)
}

function buildHeaders() {
  const authToken = localStorage.getItem('myapp.token')
  return { ...defaultHeaders, Authorization: authToken }
}

const defaultHeaders = {
  Accept: 'application/json',
  'Content-Type': 'application/json',
}

loadData() {
  if (state.data.length) {
    // ничего не делай
  } else {
    this.props.callActionAndLoadData()
  }
}

{
        test: /\.js$/,
        loaders: ['react-hot', 'babel'],
        //include/exclude и тд
      },

plugins: [
    new WebpackNotifierPlugin, // и другие...
    new webpack.HotModuleReplacementPlugin()
  ],

export function myAction(date) {
  return {
    type: 'CHANGE_DATE',
    data: date
  }
}

const mapStateToProps = (state) => ({
  dates: state.dates,
})

const mapDispatchToProps = (dispatch) => ({
  myAction: (date) => dispatch(myAction(date)),
})

<DayPickerSection selected={this.props.dates.current}  myAction={this.props.myAction} />

const DayPickerSection = ({selected, myAction}) => {
    return (
        <div>
            <DatePicker selected={selected}
                        onChange={(date) => myAction(date) }/>
        </div>
    );
};

import React, { Component } from 'react'
import { connect } from 'react-redux'
import { myAction } from '../actions'

class App extends Component {
  render() {
    const { dates, myAction } = this.props

    return (
      <div className='my-app'>
        <DayPickerSection selected={dates.current}  myAction={myAction} />
      </div>
    )
  }
}

const mapStateToProps = (state) => ({
  dates: state.dates,
})

const mapDispatchToProps = (dispatch) => ({
  myAction: (date) => dispatch(myAction(date)),
})

export default connect(mapStateToProps, mapDispatchToProps)(App)

app.engine('handlebars', exphbs({defaultLayout: 'main'}));
app.set('view engine', 'hbs'); //в офф.доке используют расширение handlebars

Как на счет jwt ?

const express = require('express')
const router = express.Router()
const User = require('../models/user')
const v4 = require('node-uuid').v4
const jwt = require('jsonwebtoken')

router.post('/signup', (req, res, next) => {

  req.check('email', 'Please enter a valid email').len(1).isEmail()
  req.check('password', 'Please enter a password with a length between 4 and 34 digits').len(4, 34)

  const errors = req.validationErrors()

  if (errors) {
    return res.status(400).json({ errors })
  } else {
    User.hashPassword(req.body.password, (err, passwordHash) => {
      if (err) {
        return res.status(400).json({ error: err.message })
      }

      const user = new User({
        name: req.body.name,
        nickname: req.body.nickname,
        email: req.body.email,
        password: req.body.password,
      })

      user.passwordHash = passwordHash
      user.save((err, item) => {
        if (err) {
          return res.status(400).json({ error: err.message })
        }
        const payload = {
          _id: item._id,
          iss: 'http://localhost:3000',
          permissions: 'poll',
        }
        const options = {
          expiresIn: '7d',
          jwtid: v4(),
        }
        const secret = new Buffer(process.env.AUTH0_CLIENT_SECRET, 'base64')
        jwt.sign(payload, secret, options, (err, token) => {
          return res.json({ data: token })
        })
      })
    })
  }
})

router.post('/signin', (req, res, next) => {

  req.check('email', 'Please enter a valid email').len(1).isEmail()
  req.check('password', 'Please enter a password with a length between 4 and 34 digits').len(4, 34)

  const errors = req.validationErrors()
  const password = req.body.password

  if (errors) {
    return res.status(400).json({ errors })
  } else {
    User.findOne({ email: req.body.email }, (err, user) => {
      if (err) {
        return res.status(400).json({ error: err.message })
      }
      if (!user) {
        return res.status(400).json({ error: 'User not found' })
      }
      User.comparePasswordAndHash(password, user.passwordHash, (err, areEqual) => {
        if (err) {
          return res.status(400).json({ error: err.message })
        }
        if (!areEqual) {
          return res.status(400).json({ error: 'Wrong password' })
        }
        const payload = {
          _id: user._id,
          iss: 'http://localhost:3000',
          permissions: 'poll',
        }
        const options = {
          expiresIn: '7d',
          jwtid: v4(),
        }
        const secret = new Buffer(process.env.AUTH0_CLIENT_SECRET, 'base64')
        jwt.sign(payload, secret, options, (err, token) => {
          return res.json({ data: token })
        })
      })
    })
  }
})

module.exports = router;

const mongoose = require('mongoose')
const bcrypt = require('bcrypt')
const Schema = mongoose.Schema
let bcrypt_cost = 12

const userSchema = new Schema({
  name: { type: String, required: true },
  email: { type: String, required: true },
  passwordHash: String,
})

userSchema.statics.hashPassword = (passwordRaw, cb) => {
  if (process.env.NODE_ENV === 'test') {
    bcrypt_cost = 1
  }
  bcrypt.hash(passwordRaw, bcrypt_cost, cb)
}

userSchema.statics.comparePasswordAndHash = (password, passwordHash, cb) => {
  bcrypt.compare(password, passwordHash, cb)
}

const User = mongoose.model('User', userSchema)

module.exports = User