basic persistence for login, with mongodb (fixes #2)