Rejig assets; mongoose integration testing; password hashing and authentication