do over setup with mongoose-auth