messing with mongodb authentication