Node.js and ACL

I've chosen for my project Node.js+Express+Mongoose. Until now, I didn´t need to use ACL, but in this phase of project a I need to implement this.

NPM contains a few modules, but which one to choose?

Please tell me your experiences with ACL (Node.js+Express+Mongoose). And If you know any tutorial it would be great :), but it's not so needed, what I exactly need to know what Node.js programmers are using for ACL.

Last possibility is write own acl-middleware, it could be interesting experience for me. I suppose :)