01Which middleware library is recommended for setting secure HTTP headers in Express?
02What is the primary purpose of a Content Security Policy (CSP)?
03Why should you use a Redis-backed rate limiter instead of an in-memory one for a clustered Express app?
04What does the 'HttpOnly' flag do for a cookie?