add auth to mongodb, update all.js