// Validate email if (!validator.isEmail(email)) { return res.status(400).send('Invalid email'); } // Hash password const hashedPassword = await bcrypt.hash(password ...