removing mongoose auth