GCCHR-4 implementing security updates- working with basic auth reading user info from MongoDB