pass collection names via config;  accept config with no credentials for mongo connection
handle put token via json payload (mainly to deal with bug in application when deployed as a war)