Param check: if user is set, pass must be present (mongo)