Rails but for JavaScript. Today you have to pick and validate a crypto framework to do token based auth. Or maybe not JavaScript.

A distributed application framework. You run software on your OWN machine, offloading computation and storage needs to other trusted nodes. Framework should have the trust system, a data store that automatically replicates, system to explicitly show what data is being shared with whom. Effectively, you can still log into your account from anywhere. The software and data will sync. Won't work for problems that need large scale data and also lowers its collective value. For instance, a social network but no advertising.