NodeJS and Express - Safely differentiate between clients that make the request

Question

Currently I am working on a project that needs to keep track and authenticate users from different clients. Each of these clients is an individual website. In the database,