What are your go-to libraries or packages for security/authentication in your web apps?

Anything from rate limiting to load testing, or cryptographic tools to validation—what are you using?