try adding mongoose-auth back