non-protected mongodb as a sessions store

I have modified lib/sessions/stores/mongodb.js so that a mongodb environment wothout user/password can be used as a sessions store. See if it makes sense to merge.