See:
https://david-dm.org/angular-fullstack/angular-fullstack-deps/5.0.0
https://david-dm.org/angular-fullstack/angular-fullstack-deps/5.0.0?type=dev

It would be better to use bcrypt, beause its more secure as it's slower (uses more computing cycles).
Your code could also be better:

You wouldn't need salt field in User model, because it's saved into the same field as password does.

For authentication, something like:

var mongoose = require('mongoose'),
  bcrypt = require('bcryptjs');

var userSchema = mongoose.Schema({
  email: String,

I feel that the videos on user pages can have a familar play triangle icon (▶) on top, possibly with the background opacity reduced to make this icon more visible, so users can tell apart the videos and images.

This is a proposal.
GitHub supports CODEOWNERS

This feature makes automatically requested for review.