I’m developing a web app using Node.js, Express, and MongoDB. I want to implement secure login and registration. I’ve read about JWT (JSON Web Tokens) and bcrypt hashing but am unsure about the best practices for protecting sessions and managing tokens. Could anyone share a standard approach for secure user authentication?