trying to sort out the authentication with Mongo