use mongo auth functionality