Stable mongoose

Setting mongoose.js to * for version updated to an unsupported version,
so setting the version explicitly to control for that.