authenticate on mongo db, not connection