no mongo password, bind host on all