- oauth - try https://github.com/t1msh/node-oauth20-provider ? - accepts email, password - HTTPS only - returns bearer token