i have some experience (mostly as a student) with react and redux, and on the other hand i also have some experience with express, normally for my apps (all of them are really simple) i make a rest api with express, make express interact with mongo or any db im using and then retrieve the data to react. That's kinda all the experience i have with them.
Now, i want to make an app with an accounts system: register + login + authorization stuff (accounts levels and stuff like that) but i'm kinda lost on where to begin
the only thing i ever did related to this was sending the user and password to the express server, verificate and then send some data back and store it in a cookie, and that way check if a user is authorized to do something or not
i know that this is the most unsafe way of doing it, so that's why i ask what the correct way should be, what technologies should i be using? how should i architect my apps?