Mongoose auth update

I use Poang on a bunch of apps, but the package.json is a bit outdated, and the app no longer runs on Heroku. I got it working again using these changes. I don't know whether this is the best configuration, but it's what it took for me to get Poang running