title: How to securely keep track of membership status in a web app
body: <p>I'm building a web app for a client and I've never worked on a membership feature before.</p>
  <p>I am using Node for the backend, Stripe for monthly payments, and mongo as a database.</p>
  <p>I am planning to have a regular and a premium membership option. The regular membership is free(can still make an account) but won't have access to some features and the premium membership will have all the features. How would I securely keep a record of who has a regular account and who has a premium account?</p>
  <p>I feel like it wouldn't be secure to keep a list of user id in some sort of database like mongo and check upon login whether they are premium. Or would it?</p>