tweaks with mongo, passport, and deps