How to design a secure web architecture for login using session in sails.js

I want to design a secure web architecture for login using session in sails.js.

I have roles and permission as well after login process.

Any answer ( GUI/ Diagram ) will be appreciable.