* tests weren't properly testing auth stuff
* forked mongobox to add option to enable auth