require authorization to access mongodb