Pin mongoose to 3.5.11 due to kerberos.node issue

See https://github.com/LearnBoost/mongoose/issues/1463