Add note about --auth being enabled for MongoDB

Now that MongoDB is started with `--auth` by default it makes sense to let people know that they can can advantage of this by adding users to the admin database if they want to test authentication.