SECRETS SHOULD NOT BE PUBLIC
mongoose connect in the right place